Title: [256399] trunk/Source/WebKit
- Revision
- 256399
- Author
- bfulg...@apple.com
- Date
- 2020-02-11 16:47:35 -0800 (Tue, 11 Feb 2020)
Log Message
[iOS] Deny access to unused tcp service from NetworkProcess
https://bugs.webkit.org/show_bug.cgi?id=207590
<rdar://problem/57895351>
Reviewed by Darin Adler.
* Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (256398 => 256399)
--- trunk/Source/WebKit/ChangeLog 2020-02-12 00:47:09 UTC (rev 256398)
+++ trunk/Source/WebKit/ChangeLog 2020-02-12 00:47:35 UTC (rev 256399)
@@ -1,3 +1,13 @@
+2020-02-11 Brent Fulgham <bfulg...@apple.com>
+
+ [iOS] Deny access to unused tcp service from NetworkProcess
+ https://bugs.webkit.org/show_bug.cgi?id=207590
+ <rdar://problem/57895351>
+
+ Reviewed by Darin Adler.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb:
+
2020-02-11 Chris Dumez <cdu...@apple.com>
Unreviewed, revert r255662 as it seems to cause blank views in SVC.
Modified: trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb (256398 => 256399)
--- trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb 2020-02-12 00:47:09 UTC (rev 256398)
+++ trunk/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.Networking.sb 2020-02-12 00:47:35 UTC (rev 256399)
@@ -632,6 +632,10 @@
(local tcp)
(remote tcp))
+;;; <rdar://problem/9876970>
+(deny network-outbound
+ (remote tcp "localhost:62078"))
+
;; Various services required by system frameworks
(allow mach-lookup (with report) (with telemetry)
(global-name "com.apple.lsd.mapdb")
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
