Indeed, that is a regression, something we overlooked when testing confinement of the browser. With the confinement, browsing anywhere on the filesystem (file:// URLs) is forbidden. Not sure whether we can easily add an exception to the apparmor profile for that one file (which by the way is localized, so it’s not actually just one file, we’d need a wildcard exception for file:///custom/vendor/here/location-provider-consent/*.html), and if it’s desirable at all from a security standpoint. Is the expectation that these TOS have to be available offline? Or is it ok to point users to the same page online, with an http:// link?
-- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1507667 Title: HERE conditions cannot be loaded Status in Canonical System Image: Confirmed Status in webbrowser-app package in Ubuntu: Confirmed Bug description: After the latest confinement upgrade to webbrowser-app, HERE terms and conditions are no longer accessible. Test case. - Flash the phone. - Finish the setup wizard. - Finish gesture tutorial. - Open location indicator. - Tap on "Read HERE terms and conditions". Expected result. - Webbrowser app is launched and T&C file is loaded and displayed. Actual result. - Webbrowser app cannot read local files, T&C file gives an error. To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1507667/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
