Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 022bc68dc5f93a364c8a30b093664e6fb16ae565
https://github.com/WebKit/WebKit/commit/022bc68dc5f93a364c8a30b093664e6fb16ae565
Author: Per Arne Vollan <[email protected]>
Date: 2026-07-01 (Wed, 01 Jul 2026)
Changed paths:
M Source/WebKit/NetworkProcess/NetworkProcess.cpp
M Source/WebKit/Platform/IPC/FormDataReference.h
M Source/WebKit/Shared/AuxiliaryProcess.h
A Source/WebKit/Shared/Cocoa/PathsBlockedForSandboxExtensions.h
A Source/WebKit/Shared/Cocoa/PathsBlockedForSandboxExtensions.mm
M Source/WebKit/Shared/WebsiteDataStoreParameters.h
M Source/WebKit/Shared/WebsiteDataStoreParameters.serialization.in
M Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm
M Source/WebKit/UIProcess/WebsiteData/Cocoa/WebsiteDataStoreCocoa.mm
M Source/WebKit/UIProcess/WebsiteData/WebsiteDataStore.cpp
M Source/WebKit/WebKit.xcodeproj/project.pbxproj
M Tools/TestWebKitAPI/Tests/WebKit/WKWebView/UploadDirectory.mm
Log Message:
-----------
The Network process should not create form data sandbox extensions
https://bugs.webkit.org/show_bug.cgi?id=312846
rdar://174670487
Reviewed by Brent Fulgham.
The Network process should not create form data sandbox extensions for a set
of locations that it has read access to in the sandbox. This patch defines
that set, and prevents sandbox extensions from being created and consumed
when these unexpected locations are being used in form data.
Test: WebKit.BlockedUploadDirectory
* Source/WebKit/NetworkProcess/NetworkProcess.cpp:
(WebKit::getDarwinCacheDir):
(WebKit::getDarwinTempDir):
(WebKit::addPathsBlockedForSandboxExtensions):
(WebKit::NetworkProcess::addStorageSession):
* Source/WebKit/Platform/IPC/FormDataReference.h:
(IPC::FormDataReference::FormDataReference):
(IPC::FormDataReference::sandboxExtensionHandles const):
* Source/WebKit/Shared/AuxiliaryProcess.h:
* Source/WebKit/Shared/WebsiteDataStoreParameters.h:
* Source/WebKit/Shared/WebsiteDataStoreParameters.serialization.in:
* Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm:
(WebKit::AuxiliaryProcess::getHomeDirectory):
(WebKit::populateSandboxInitializationParameters):
(WebKit::getHomeDirectory): Deleted.
* Source/WebKit/Shared/Cocoa/PathsBlockedForSandboxExtensions.h: Added.
* Source/WebKit/Shared/Cocoa/PathsBlockedForSandboxExtensions.mm: Added.
* Source/WebKit/UIProcess/WebsiteData/Cocoa/WebsiteDataStoreCocoa.mm:
(WebKit::libraryRootDirectory):
(WebKit::WebsiteDataStore::platformSetNetworkParameters):
* Source/WebKit/UIProcess/WebsiteData/WebsiteDataStore.cpp:
(WebKit::WebsiteDataStore::parameters):
* Source/WebKit/WebKit.xcodeproj/project.pbxproj:
* Tools/TestWebKitAPI/Tests/WebKitCocoa/UploadDirectory.mm:
(TEST(WebKit, UploadDirectory)):
(TEST(WebKit, BlockedUploadDirectory)):
Originally-landed-as: 305413.785@safari-7624-branch (f6680b7bcc5c).
rdar://180427740
Canonical link: https://commits.webkit.org/316251@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
