Title: [286071] trunk/Source/WebKit
- Revision
- 286071
- Author
- [email protected]
- Date
- 2021-11-19 11:47:37 -0800 (Fri, 19 Nov 2021)
Log Message
[macOS] Enable message filtering for all WebKit processes
https://bugs.webkit.org/show_bug.cgi?id=233334
<rdar://problem/85568306>
Reviewed by Brent Fulgham.
The sandbox parameter enabling message filtering should be set in all WebKit processes.
* Shared/mac/AuxiliaryProcessMac.mm:
(WebKit::AuxiliaryProcess::initializeSandbox):
* WebProcess/cocoa/WebProcessCocoa.mm:
(WebKit::WebProcess::initializeSandbox):
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (286070 => 286071)
--- trunk/Source/WebKit/ChangeLog 2021-11-19 19:36:35 UTC (rev 286070)
+++ trunk/Source/WebKit/ChangeLog 2021-11-19 19:47:37 UTC (rev 286071)
@@ -1,3 +1,18 @@
+2021-11-19 Per Arne <[email protected]>
+
+ [macOS] Enable message filtering for all WebKit processes
+ https://bugs.webkit.org/show_bug.cgi?id=233334
+ <rdar://problem/85568306>
+
+ Reviewed by Brent Fulgham.
+
+ The sandbox parameter enabling message filtering should be set in all WebKit processes.
+
+ * Shared/mac/AuxiliaryProcessMac.mm:
+ (WebKit::AuxiliaryProcess::initializeSandbox):
+ * WebProcess/cocoa/WebProcessCocoa.mm:
+ (WebKit::WebProcess::initializeSandbox):
+
2021-11-19 Antoine Quint <[email protected]>
[Model] add support for seeking animations
Modified: trunk/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm (286070 => 286071)
--- trunk/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm 2021-11-19 19:36:35 UTC (rev 286070)
+++ trunk/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm 2021-11-19 19:47:37 UTC (rev 286071)
@@ -56,6 +56,7 @@
#import <wtf/SoftLinking.h>
#import <wtf/SystemTracing.h>
#import <wtf/WallTime.h>
+#import <wtf/cocoa/Entitlements.h>
#import <wtf/spi/darwin/SandboxSPI.h>
#import <wtf/text/Base64.h>
#import <wtf/text/StringBuilder.h>
@@ -720,6 +721,12 @@
String dataVaultParentDirectory;
#endif
+ bool enableMessageFilter = false;
+#if HAVE(SANDBOX_MESSAGE_FILTERING)
+ enableMessageFilter = WTF::processHasEntitlement("com.apple.private.security.message-filter");
+#endif
+ sandboxParameters.addParameter("ENABLE_SANDBOX_MESSAGE_FILTER", enableMessageFilter ? "YES" : "NO");
+
initializeSandboxParameters(parameters, sandboxParameters);
if (!applySandbox(parameters, sandboxParameters, dataVaultParentDirectory)) {
Modified: trunk/Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm (286070 => 286071)
--- trunk/Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm 2021-11-19 19:36:35 UTC (rev 286070)
+++ trunk/Source/WebKit/WebProcess/cocoa/WebProcessCocoa.mm 2021-11-19 19:47:37 UTC (rev 286071)
@@ -102,7 +102,6 @@
#import <wtf/LogInitialization.h>
#import <wtf/ProcessPrivilege.h>
#import <wtf/SoftLinking.h>
-#import <wtf/cocoa/Entitlements.h>
#import <wtf/cocoa/NSURLExtras.h>
#import <wtf/cocoa/RuntimeApplicationChecksCocoa.h>
#import <wtf/cocoa/TypeCastsCocoa.h>
@@ -696,12 +695,6 @@
sandboxParameters.setOverrideSandboxProfilePath(makeString(String([webKitBundle resourcePath]), "/com.apple.WebProcess.sb"));
- bool enableMessageFilter = false;
-#if HAVE(SANDBOX_MESSAGE_FILTERING)
- enableMessageFilter = WTF::processHasEntitlement("com.apple.private.security.message-filter");
-#endif
- sandboxParameters.addParameter("ENABLE_SANDBOX_MESSAGE_FILTER", enableMessageFilter ? "YES" : "NO");
-
AuxiliaryProcess::initializeSandbox(parameters, sandboxParameters);
#endif
}
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
