[Initiatives.wiki] Update Sandbox all the WebKit!
- From: Michael Catanzaro <mcatanzaro src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [Initiatives.wiki] Update Sandbox all the WebKit!
- Date: Tue, 16 Jun 2020 20:44:19 +0000 (UTC)
commit 105ce3d81a4f57498178883dd21de91d408d879c
Author: Michael Catanzaro <mcatanzaro gnome org>
Date: Tue Jun 16 20:44:18 2020 +0000
Update Sandbox all the WebKit!
Sandbox-all-the-WebKit!.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/Sandbox-all-the-WebKit!.md b/Sandbox-all-the-WebKit!.md
index 8e4fcaa..a0ef715 100644
--- a/Sandbox-all-the-WebKit!.md
+++ b/Sandbox-all-the-WebKit!.md
@@ -2,6 +2,6 @@
* If your application creates its own `WebKitWebContext`, call `webkit_web_context_set_sandbox_enabled()`
on it.
* If your application does not create its own `WebKitWebContext`, then it uses the default web context. Use
`webkit_web_context_get_default()` and call `webkit_web_context_set_sandbox_enabled()` on it.
* Perform a basic functionality test to sanity-check that the sandbox has not broken major app
functionality. The vast majority of applications should not notice any issues.
- * Applications that attempt to access file:/// URIs from a web process extension will break. You will need
to either mount the directory containing the desired file inside the sandbox, or rearchitect the application.
[Example.](https://gitlab.gnome.org/GNOME/epiphany/-/commit/a2b73274280efa067632ec0dfedb3fcc7a41f8fe) Note
that most applications only load files via the UI process using webkit_web_view_load_url(); such loads will
work fine because they are managed by the unsandboxed network process, so whitelisting is not required.
+ * Applications that attempt to access local files from a web process extension may break if not included in
the sandbox. You may need to mount the directory containing the desired file inside the sandbox.
[Example.](https://gitlab.gnome.org/GNOME/epiphany/-/commit/a2b73274280efa067632ec0dfedb3fcc7a41f8fe) Note
that most applications only load files via the UI process using webkit_web_view_load_url(); this does not
require whitelisting because WebKit will load the file via its unsandboxed network process.
* [Example](https://gitlab.gnome.org/GNOME/gnome-initial-setup/-/merge_requests/87/diffs)
* [Tracking issue](https://gitlab.gnome.org/GNOME/Initiatives/-/issues/19)
\ No newline at end of file
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]