[Webkit-unassigned] [Bug 202073] New: Don't create a universal sandbox extension in WebPageProxy::loadRequest when loading local files

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Sep 20 23:55:23 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=202073

            Bug ID: 202073
           Summary: Don't create a universal sandbox extension in
                    WebPageProxy::loadRequest when loading local files
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: pvollan at apple.com

When loading local files through WebPageProxy::loadRequest, a sandbox extension for "/" is created. This is problematic, since creating a universal sandbox extension can fail, and there are also cases where it succeeds, but the WebContent process is failing to create sandbox extensions for the Networking process. Both of these cases can be fixed by creating a sandbox extension for the base url of the local file instead of a universal extension. Clients which need to create a universal extension can use WebPageProxy::loadFile instead, since this method gives the caller control over which folder the sandbox extension is created for, through a resource URL parameter.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190921/58047b9e/attachment.html>


More information about the webkit-unassigned mailing list