[gnome-boxes/sandbox-webkitgtk] build, app: Sandbox WebKit

[Felipe Borges <felipeborges src gnome org>]

commit 5848068ae25209fb9ee9538cd58683fb465e959d
Author: Felipe Borges <felipeborges gnome org>
Date:   Fri Jun 19 13:35:38 2020 +0200

    build, app: Sandbox WebKit
    
    See https://gitlab.gnome.org/GNOME/Initiatives/-/issues/19

 src/app.vala    | 3 +++
 src/meson.build | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)
---
diff --git a/src/app.vala b/src/app.vala
index f8cba10b..e03e89a3 100644
--- a/src/app.vala
+++ b/src/app.vala
@@ -125,6 +125,9 @@ public App () {
                                    "wrap-license", true);
         });
         add_action (action);
+
+        var webkit_context = WebKit.WebContext.get_default ();
+        webkit_context.set_sandbox_enabled (true);
     }
 
     public override void startup () {
diff --git a/src/meson.build b/src/meson.build
index 0492821d..3d4302af 100644
--- a/src/meson.build
+++ b/src/meson.build
@@ -142,7 +142,7 @@ dependencies = [
   dependency ('spice-client-gtk-3.0', version: '>= 0.32'),
   dependency ('tracker-sparql-2.0'),
   dependency ('vte-2.91', version: '>= 0.40.2'),
-  dependency ('webkit2gtk-4.0'),
+  dependency ('webkit2gtk-4.0', version: '>= 2.26.0'),
   dependency ('libhandy-0.0', version: '>= 0.0.11'),
   cc.find_library('m', required : false),
   valac.find_library ('gio-2.0-workaround', dirs: vapi_dir),