Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ba2293363a8d287735fac85780965fcd675d3abc
https://github.com/WebKit/WebKit/commit/ba2293363a8d287735fac85780965fcd675d3abc
Author: Darryl Parkinson <[email protected]>
Date: 2026-10-10 (Sat, 10 Oct 2026)
Changed paths:
M Source/WTF/Scripts/Preferences/UnifiedWebPreferences.yaml
M Source/WebKit/UIProcess/API/APIPageConfiguration.cpp
M Source/WebKit/UIProcess/API/APIPageConfiguration.h
M Source/WebKit/UIProcess/WebPageProxy.cpp
M Source/WebKit/UIProcess/WebProcessPool.cpp
M Tools/TestWebKitAPI/Tests/WebKit/WKWebView/EnhancedSecurity.mm
Log Message:
-----------
Add a preference to enable EnhancedSecurity by default
https://bugs.webkit.org/show_bug.cgi?id=326349
rdar://189191126
Reviewed by Per Arne Vollan and Marcus Plutowski.
Add an internal preference, EnhancedSecurityPlatformDefaultEnabled, that makes
EnhancedSecurity the default for WebViews. It is off by default on all
platforms,
so this change has no effect until it is enabled. A follow-up will enable it on
selected platforms.
When enabled, the default applies regardless of securityRestrictionMode; a
follow-up will add a way to opt out.
Test: Tools/TestWebKitAPI/Tests/WebKit/WKWebView/EnhancedSecurity.mm
* Source/WTF/Scripts/Preferences/UnifiedWebPreferences.yaml:
* Source/WebKit/UIProcess/API/APIPageConfiguration.cpp:
(API::PageConfiguration::isEnhancedSecurityEnabled const):
(API::PageConfiguration::isEnhancedSecurityEnabledByDefault const):
* Source/WebKit/UIProcess/API/APIPageConfiguration.h:
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::currentEnhancedSecurityState const):
* Source/WebKit/UIProcess/WebProcessPool.cpp:
(WebKit::enhancedSecurityForDefault):
(WebKit::WebProcessPool::establishRemoteWorkerContextConnectionToNetworkProcess):
(WebKit::WebProcessPool::prewarmProcess):
(WebKit::WebProcessPool::createWebPage):
* Tools/TestWebKitAPI/Tests/WebKit/WKWebView/EnhancedSecurity.mm:
(TestWebKitAPI::enableEnhancedSecurityTestFeature):
(TestWebKitAPI::loadSimplePageForPlatformDefaultTest):
(TestWebKitAPI::TEST(EnhancedSecurity,
PlatformDefaultDisabledByDefaultUsesStandardProcess)):
(TestWebKitAPI::TEST(EnhancedSecurity, PlatformDefaultEnablesEnhancedSecurity)):
(TestWebKitAPI::TEST(EnhancedSecurity,
PlatformDefaultOverridesSecurityRestrictionModeNone)):
(TestWebKitAPI::TEST(EnhancedSecurity,
PlatformDefaultOverridesNavigationSecurityRestrictionModeNone)):
(TestWebKitAPI::TEST(EnhancedSecurity,
LockdownModeTakesPrecedenceOverPlatformDefault)):
(TestWebKitAPI::TEST(EnhancedSecurity,
NavigationLockdownModeTakesPrecedenceOverPlatformDefault)):
(TestWebKitAPI::TEST(EnhancedSecurity,
SystemLockdownModeTakesPrecedenceOverPlatformDefault)):
(TestWebKitAPI::TEST(EnhancedSecurity, ForceDisabledOverridesPlatformDefault)):
Canonical link: https://commits.webkit.org/323340@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
