Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 11357b5ed3e6bfed77d3a4da140f3b93e28ad558
https://github.com/WebKit/WebKit/commit/11357b5ed3e6bfed77d3a4da140f3b93e28ad558
Author: Per Arne Vollan <[email protected]>
Date: 2026-01-08 (Thu, 08 Jan 2026)
Changed paths:
M Source/WebKit/Shared/Sandbox/iOS/webcontent-defines.sb
M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
Log Message:
-----------
[macOS] Block clock_get_time in WebContent sandbox
https://bugs.webkit.org/show_bug.cgi?id=305111
rdar://167763966
Reviewed by Mike Wyrzykowski.
In <https://commits.webkit.org/302812@main>, we added this syscall to the
sandbox. However, we would like to
block it on some macOS versions, since there exists a workaround. The syscall
was already allowed on iOS, so
we can remove the duplicate entry there.
* Source/WebKit/Shared/Sandbox/iOS/webcontent-defines.sb:
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:
Canonical link: https://commits.webkit.org/305316@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications