[Webkit-unassigned] [Bug 189961] New: [WPE][GTK] Fix HTTP credentials in sandbox
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Sep 25 11:31:31 PDT 2018
https://bugs.webkit.org/show_bug.cgi?id=189961
Bug ID: 189961
Summary: [WPE][GTK] Fix HTTP credentials in sandbox
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: WebKit Gtk
Assignee: webkit-unassigned at lists.webkit.org
Reporter: pgriffis at igalia.com
CC: bugs-noreply at webkitgtk.org
Currently the WebProcess talks to libsecret for HTTP credentials.
This is unacceptable and needs to be proxied through the UI layer which can
limit password access by origin.
See also how this was handled in Epiphany: https://gitlab.gnome.org/GNOME/epiphany/commit/68b0f85747a177047a7b49d839895aad54b05309
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180925/a1ca61df/attachment-0001.html>
More information about the webkit-unassigned
mailing list