Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 3ff8ed92592f893cf36b53310564c782abdf8139
https://github.com/WebKit/WebKit/commit/3ff8ed92592f893cf36b53310564c782abdf8139
Author: Dominik Stolz <[email protected]>
Date: 2026-10-06 (Tue, 06 Oct 2026)
Changed paths:
M Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in
M
Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in
Log Message:
-----------
Deny asr-parser-enter in the sandbox profiles of the networking daemon.
rdar://176053617
Reviewed by Per Arne Vollan.
This adds a new rule to the sandbox profile for the networking daemon
(com.apple.WebKit.NetworkProcess)
on macOS and embedded platforms. The new rule denies access to all image
parsers except PNG.
No new test is added since the new rule does not change any observable
behaviour.
* Source/WebKit/NetworkProcess/mac/com.apple.WebKit.NetworkProcess.sb.in:
The sandbox profile used on macOS.
* Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb.in:
The sandbox profile used on embedded platforms.
Canonical link: https://commits.webkit.org/322835@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
