Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 69aa56247c6cb79b4ad9f029bbf9c83d7c55e3cf
https://github.com/WebKit/WebKit/commit/69aa56247c6cb79b4ad9f029bbf9c83d7c55e3cf
Author: Ben Nham <[email protected]>
Date: 2026-06-21 (Sun, 21 Jun 2026)
Changed paths:
M LayoutTests/TestExpectations
A
LayoutTests/http/tests/ipc/resources/write-web-archive-frame-ancestry-check-iframe.html
A
LayoutTests/http/tests/ipc/write-web-archive-frame-ancestry-check-expected.txt
A LayoutTests/http/tests/ipc/write-web-archive-frame-ancestry-check.html
M LayoutTests/platform/ios/TestExpectations
M LayoutTests/platform/mac-wk2/TestExpectations
M Source/WebKit/CMakeLists.txt
M Source/WebKit/DerivedSources-input.xcfilelist
M Source/WebKit/DerivedSources.make
A Source/WebKit/Shared/WriteWebArchiveToPasteBoardResult.h
A Source/WebKit/Shared/WriteWebArchiveToPasteBoardResult.serialization.in
M Source/WebKit/UIProcess/Cocoa/WebPasteboardProxyCocoa.mm
M Source/WebKit/UIProcess/RemotePageProxy.cpp
M Source/WebKit/UIProcess/WebPasteboardProxy.h
M Source/WebKit/UIProcess/WebPasteboardProxy.messages.in
M Source/WebKit/WebKit.xcodeproj/project.pbxproj
M Source/WebKit/WebProcess/WebCoreSupport/WebPlatformStrategies.cpp
Log Message:
-----------
[Site Isolation] WebPasteboardProxy should only allow access to remote frames
that are descendants of the root frame being copied
https://bugs.webkit.org/show_bug.cgi?id=315692
rdar://176891998
Reviewed by Sihui Liu.
WebPasteboardProxy currently does no subtree checks on the remote frame IDs it
is given, which means
that it could potentially cause content from an unrelated cross-site remote
frame to be written to
the pasteboard. Fix this by adding message checks to ensure that all remote
frame IDs used within
WebPasteboardProxy are descendants of the root frame ID provided.
* LayoutTests/TestExpectations:
*
LayoutTests/http/tests/ipc/resources/write-web-archive-frame-ancestry-check-iframe.html:
Added.
*
LayoutTests/http/tests/ipc/write-web-archive-frame-ancestry-check-expected.txt:
Added.
* LayoutTests/http/tests/ipc/write-web-archive-frame-ancestry-check.html: Added.
* LayoutTests/platform/ios/TestExpectations:
* LayoutTests/platform/mac-wk2/TestExpectations:
* Source/WebKit/CMakeLists.txt:
* Source/WebKit/DerivedSources-input.xcfilelist:
* Source/WebKit/DerivedSources.make:
* Source/WebKit/Shared/WriteWebArchiveToPasteBoardResult.h: Added.
* Source/WebKit/Shared/WriteWebArchiveToPasteBoardResult.serialization.in:
Added.
* Source/WebKit/UIProcess/Cocoa/WebPasteboardProxyCocoa.mm:
(WebKit::validateFrameIdentifiers):
(WebKit::WebPasteboardProxy::writeWebContentToPasteboard):
(WebKit::WebPasteboardProxy::writeWebArchiveToPasteBoard):
* Source/WebKit/UIProcess/RemotePageProxy.cpp:
(WebKit::RemotePageProxy::RemotePageProxy):
* Source/WebKit/UIProcess/WebPasteboardProxy.h:
* Source/WebKit/UIProcess/WebPasteboardProxy.messages.in:
* Source/WebKit/WebKit.xcodeproj/project.pbxproj:
* Source/WebKit/WebProcess/WebCoreSupport/WebPlatformStrategies.cpp:
(WebKit::WebPlatformStrategies::writeWebArchive):
Canonical link: https://commits.webkit.org/315578@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
