[Webkit-unassigned] [Bug 193749] [WPE][GTK] Deprecate nonfunctional process limit APIs

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 24 08:57:52 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=193749

Michael Catanzaro <mcatanzaro at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mcatanzaro at igalia.com

--- Comment #2 from Michael Catanzaro <mcatanzaro at igalia.com> ---
(In reply to Carlos Garcia Campos from comment #1)
> We are supposed to branch in two weeks, we could also branch right now after
> r240363, but still allow to land the pending features API in the branch for
> a while. Then we can decide what to do in trunk.

Either way seems fine.

> We can probably deprecate
> both APIs, and keep the single process mode as a debugging option using an
> env var (you love them).

If we add an env var, let's limit it to developer mode.

> What's exactly PSON?

Process swap on navigation.

Status quo: load google.com then apple.com in the same web view, only one web process is used, apple.com can potentially steal sensitive data from google.com because it can read process memory via speculative execution attack

PSON: load google.com then apple.com, new web process is launched for the same web view, danger is mitigated because the two security origins share different processes

Probably there will be problems, so not a great thing to enable at the end of the release cycle.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190124/04049672/attachment.html>


More information about the webkit-unassigned mailing list