Public bug reported:
Calling WebContextDelegateWorker::sendMessage allows the caller to pass
a QObject in to the script running on another thread. This isn't safe,
and we shouldn't allow this in the API at all
** Affects: oxide
Importance: Medium
Assignee: Chris Coulson (chrisccoulson)
Status: Fix Released
** Changed in: oxide
Importance: Undecided => Medium
** Changed in: oxide
Status: New => In Progress
** Changed in: oxide
Assignee: (unassigned) => Chris Coulson (chrisccoulson)
** Changed in: oxide
Status: In Progress => Fix Released
** Changed in: oxide
Milestone: None => branch-1.8
--
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to Oxide.
https://bugs.launchpad.net/bugs/1445673
Title:
Shouldn't be able to pass QObjects to WebContextDelegateWorker
Status in Oxide Webview:
Fix Released
Bug description:
Calling WebContextDelegateWorker::sendMessage allows the caller to
pass a QObject in to the script running on another thread. This isn't
safe, and we shouldn't allow this in the API at all
To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1445673/+subscriptions
--
Mailing list: https://launchpad.net/~ubuntu-webapps-bugs
Post to : [email protected]
Unsubscribe : https://launchpad.net/~ubuntu-webapps-bugs
More help : https://help.launchpad.net/ListHelp
