> > in addition to these standard functions, we'd like to whitelist some > functions from a few extensions chromium uses: > full text search (fts2.c): whitelist snippet(), offsets(), optimize(), but > not fts2_tokenizer(). > unicode data (icu.c): whitelist regexp(), lower(), upper(), like(), but not > icu_load_collation(). > > > Is there any reason these are still Chromium-only? Even though we're > having problems getting different vendors to agree on SQL dialect issues > with the spec, I think we should make an effort to keep WebKit unified. >
FTS and ICU are sqlite standard extensions that live in the sqlite tree. Chromium compiles its own sqlite library and includes these 2 extensions; I'm not sure if they're included in WebKitLibraries/libWebCoreSQLite3.a though. > I'm also going to forward this message on to some of our security > colleagues at Apple, and we might have more feedback shortly. > great, thanks! dumi
_______________________________________________ webkit-dev mailing list [email protected] http://lists.webkit.org/mailman/listinfo.cgi/webkit-dev
