Title: [212732] trunk/Source/WebKit2
Revision
212732
Author
[email protected]
Date
2017-02-21 11:29:10 -0800 (Tue, 21 Feb 2017)

Log Message

[WebRTC][Mac][WebKit2] Revise sandbox to limit connections to UDP and TCP
https://bugs.webkit.org/show_bug.cgi?id=168664
<rdar://problem/30600587>

Reviewed by Youenn Fablet.

Add filters to the WebRTC rule to limit network traffic to UDP and TCP.

* NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:

Modified Paths

Diff

Modified: trunk/Source/WebKit2/ChangeLog (212731 => 212732)


--- trunk/Source/WebKit2/ChangeLog	2017-02-21 19:27:02 UTC (rev 212731)
+++ trunk/Source/WebKit2/ChangeLog	2017-02-21 19:29:10 UTC (rev 212732)
@@ -1,3 +1,15 @@
+2017-02-21  Brent Fulgham  <[email protected]>
+
+        [WebRTC][Mac][WebKit2] Revise sandbox to limit connections to UDP and TCP
+        https://bugs.webkit.org/show_bug.cgi?id=168664
+        <rdar://problem/30600587>
+
+        Reviewed by Youenn Fablet.
+
+        Add filters to the WebRTC rule to limit network traffic to UDP and TCP.
+
+        * NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
+
 2017-02-21  Maureen Daum  <[email protected]>
 
         Check what LocalStorage data exists in deleteDatabasesModifiedSince() before attempting deletion.

Modified: trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in (212731 => 212732)


--- trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2017-02-21 19:27:02 UTC (rev 212731)
+++ trunk/Source/WebKit2/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in	2017-02-21 19:29:10 UTC (rev 212732)
@@ -212,5 +212,9 @@
 #if ENABLE_WEB_RTC
 ;; FIXME should be removed when <rdar://problem/30498072> is fixed.
 (if (positive? (string-length (param "ENABLE_WEB_RTC")))
-    (allow network*))
+    (allow network*
+        (local udp)
+        (remote udp)
+        (local tcp)
+        (remote tcp)))
 #endif
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to