[Initiatives.wiki] Update Sandbox all the WebKit!



commit 105ce3d81a4f57498178883dd21de91d408d879c
Author: Michael Catanzaro <mcatanzaro gnome org>
Date:   Tue Jun 16 20:44:18 2020 +0000

    Update Sandbox all the WebKit!

 Sandbox-all-the-WebKit!.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/Sandbox-all-the-WebKit!.md b/Sandbox-all-the-WebKit!.md
index 8e4fcaa..a0ef715 100644
--- a/Sandbox-all-the-WebKit!.md
+++ b/Sandbox-all-the-WebKit!.md
@@ -2,6 +2,6 @@
  * If your application creates its own `WebKitWebContext`, call `webkit_web_context_set_sandbox_enabled()` 
on it.
  * If your application does not create its own `WebKitWebContext`, then it uses the default web context. Use 
`webkit_web_context_get_default()` and call `webkit_web_context_set_sandbox_enabled()` on it.
  * Perform a basic functionality test to sanity-check that the sandbox has not broken major app 
functionality. The vast majority of applications should not notice any issues.
- * Applications that attempt to access file:/// URIs from a web process extension will break. You will need 
to either mount the directory containing the desired file inside the sandbox, or rearchitect the application. 
[Example.](https://gitlab.gnome.org/GNOME/epiphany/-/commit/a2b73274280efa067632ec0dfedb3fcc7a41f8fe) Note 
that most applications only load files via the UI process using webkit_web_view_load_url(); such loads will 
work fine because they are managed by the unsandboxed network process, so whitelisting is not required.
+ * Applications that attempt to access local files from a web process extension may break if not included in 
the sandbox. You may need to mount the directory containing the desired file inside the sandbox. 
[Example.](https://gitlab.gnome.org/GNOME/epiphany/-/commit/a2b73274280efa067632ec0dfedb3fcc7a41f8fe) Note 
that most applications only load files via the UI process using webkit_web_view_load_url(); this does not 
require whitelisting because WebKit will load the file via its unsandboxed network process.
  * [Example](https://gitlab.gnome.org/GNOME/gnome-initial-setup/-/merge_requests/87/diffs)
  * [Tracking issue](https://gitlab.gnome.org/GNOME/Initiatives/-/issues/19)
\ No newline at end of file


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]