Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: aae6a13f406fe29df1873f31f6f3e801dbf32e26
      
https://github.com/WebKit/WebKit/commit/aae6a13f406fe29df1873f31f6f3e801dbf32e26
  Author: Ronan Turner <[email protected]>
  Date:   2026-02-12 (Thu, 12 Feb 2026)

  Changed paths:
    M Source/WTF/Scripts/Preferences/UnifiedWebPreferences.yaml
    M Source/WebKit/NetworkProcess/NetworkProcess.cpp
    M Source/WebKit/NetworkProcess/NetworkProcess.h
    M Source/WebKit/NetworkProcess/NetworkProcess.messages.in
    M Source/WebKit/NetworkProcess/NetworkProcessCreationParameters.h
    M 
Source/WebKit/NetworkProcess/NetworkProcessCreationParameters.serialization.in
    M Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
    M 
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.Development.sb.in
    M 
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in
    A Source/WebKit/Shared/Cocoa/EnhancedSecurityLinkUtilities.h
    A Source/WebKit/Shared/Cocoa/EnhancedSecurityLinkUtilities.mm
    M Source/WebKit/Shared/EnhancedSecurity.h
    M Source/WebKit/SourcesCocoa.txt
    M Source/WebKit/UIProcess/API/APINavigation.cpp
    M Source/WebKit/UIProcess/API/APINavigation.h
    M Source/WebKit/UIProcess/Cocoa/WebProcessPoolCocoa.mm
    M Source/WebKit/UIProcess/EnhancedSecurityTracking.cpp
    M Source/WebKit/UIProcess/WebFramePolicyListenerProxy.cpp
    M Source/WebKit/UIProcess/WebFramePolicyListenerProxy.h
    M Source/WebKit/UIProcess/WebFrameProxy.cpp
    M Source/WebKit/UIProcess/WebFrameProxy.h
    M Source/WebKit/UIProcess/WebPageProxy.cpp
    M Source/WebKit/UIProcess/WebPageProxy.h
    M Source/WebKit/WebKit.xcodeproj/project.pbxproj
    M Tools/TestWebKitAPI/Scripts/process-entitlements.sh
    M Tools/TestWebKitAPI/Tests/WebKitCocoa/EnhancedSecurityPolicies.mm

  Log Message:
  -----------
  Support enabling Enhanced Security for specific URLs
https://bugs.webkit.org/show_bug.cgi?id=307067
rdar://162785415

Reviewed by Per Arne Vollan.

We want to be able to support enabling Enhanced Security
for a main frame navigation that has a URL matching certain
criteria.

This change modifies Enhanced Security heuristics to
support extra decision making based on a given navigation URL.

Test is added in WebKitAdditions.

* Source/WTF/Scripts/Preferences/UnifiedWebPreferences.yaml:
* Source/WebKit/NetworkProcess/NetworkProcess.cpp:
(WebKit::NetworkProcess::initializeNetworkProcess):
(WebKit::NetworkProcess::setIsEnhancedSecurityLinksEnabled):
(WebKit::NetworkProcess::isEnhancedSecurityLinksEnabled const):
(WebKit::NetworkProcess::isEnhancedSecurityLink):
* Source/WebKit/NetworkProcess/NetworkProcess.h:
* Source/WebKit/NetworkProcess/NetworkProcess.messages.in:
* Source/WebKit/NetworkProcess/NetworkProcessCreationParameters.h:
* 
Source/WebKit/NetworkProcess/NetworkProcessCreationParameters.serialization.in:
* Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
* 
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.Development.sb.in:
* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in:
* Source/WebKit/Shared/Cocoa/EnhancedSecurityLinkUtilities.h: Copied from 
Source/WebKit/Shared/EnhancedSecurity.h.
* Source/WebKit/Shared/Cocoa/EnhancedSecurityLinkUtilities.mm: Copied from 
Source/WebKit/Shared/EnhancedSecurity.h.
(WebKit::isEnhancedSecurityEnabledForURL):
* Source/WebKit/Shared/EnhancedSecurity.h:
* Source/WebKit/SourcesCocoa.txt:
* Source/WebKit/UIProcess/API/APINavigation.cpp:
(API::Navigation::setCurrentRequest):
* Source/WebKit/UIProcess/API/APINavigation.h:
(API::Navigation::setIsEnhancedSecurityLinkForCurrentSite):
(API::Navigation::isEnhancedSecurityLinkForCurrentSite const):
* Source/WebKit/UIProcess/Cocoa/WebProcessPoolCocoa.mm:
(WebKit::WebProcessPool::platformInitializeNetworkProcess):
* Source/WebKit/UIProcess/EnhancedSecurityTracking.cpp:
(WebKit::EnhancedSecurityTracking::enhancedSecurityState const):
(WebKit::reasonForEnhancedSecurity):
(WebKit::EnhancedSecurityTracking::enableIfRequired):
* Source/WebKit/UIProcess/WebFramePolicyListenerProxy.cpp:
(WebKit::WebFramePolicyListenerProxy::WebFramePolicyListenerProxy):
(WebKit::WebFramePolicyListenerProxy::didReceiveAppBoundDomainResult):
(WebKit::WebFramePolicyListenerProxy::didReceiveSafeBrowsingResults):
(WebKit::WebFramePolicyListenerProxy::didReceiveInitialLinkDecorationFilteringData):
(WebKit::WebFramePolicyListenerProxy::didReceiveSiteHasStorageResults):
(WebKit::WebFramePolicyListenerProxy::didReceiveEnhancedSecurityLinkResults):
(WebKit::WebFramePolicyListenerProxy::use):
* Source/WebKit/UIProcess/WebFramePolicyListenerProxy.h:
(WebKit::WebFramePolicyListenerProxy::create):
* Source/WebKit/UIProcess/WebFrameProxy.cpp:
(WebKit::WebFrameProxy::setUpPolicyListenerProxy):
* Source/WebKit/UIProcess/WebFrameProxy.h:
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::decidePolicyForNavigationAction):
(WebKit::WebPageProxy::decidePolicyForNewWindowAction):
(WebKit::WebPageProxy::decidePolicyForResponseShared):
(WebKit::WebPageProxy::beginEnhancedSecurityLinkCheck):
* Source/WebKit/UIProcess/WebPageProxy.h:
* Source/WebKit/WebKit.xcodeproj/project.pbxproj:
* Tools/TestWebKitAPI/Scripts/process-entitlements.sh:
* Tools/TestWebKitAPI/Tests/WebKitCocoa/EnhancedSecurityPolicies.mm:

Canonical link: https://commits.webkit.org/307368@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to