[webkit-changes] [WebKit/WebKit] 7d28e3: Content extensions should block plugin loads from ...

[Charlie Wolfe]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 7d28e39dfc1ff46bdf98b4fa898384e4a5051345
      
https://github.com/WebKit/WebKit/commit/7d28e39dfc1ff46bdf98b4fa898384e4a5051345
  Author: Charlie Wolfe <charl...@apple.com>
  Date:   2026-05-22 (Fri, 22 May 2026)

  Changed paths:
    A LayoutTests/http/tests/contentextensions/block-embed-element-expected.txt
    A LayoutTests/http/tests/contentextensions/block-embed-element.html
    A LayoutTests/http/tests/contentextensions/block-embed-element.json
    A LayoutTests/http/tests/contentextensions/block-object-element-expected.txt
    A LayoutTests/http/tests/contentextensions/block-object-element.html
    A LayoutTests/http/tests/contentextensions/block-object-element.json
    M Source/WebCore/html/HTMLPlugInElement.cpp

  Log Message:
  -----------
  Content extensions should block plugin loads from embed and object elements
https://bugs.webkit.org/show_bug.cgi?id=309880
rdar://169290430

Reviewed by Anne van Kesteren.

Plugin content loaded via <embed> and <object> elements was not checked against 
content extension
rules. Add a content extension check in HTMLPlugInElement::canLoadURL so that 
blocked URLs are
rejected before the wouldLoadAsPlugIn deferral in updateWidget.

Tests: http/tests/contentextensions/block-embed-element.html
       http/tests/contentextensions/block-object-element.html

* LayoutTests/http/tests/contentextensions/block-embed-element-expected.txt: 
Added.
* LayoutTests/http/tests/contentextensions/block-embed-element.html: Added.
* LayoutTests/http/tests/contentextensions/block-embed-element.json: Added.
* LayoutTests/http/tests/contentextensions/block-object-element-expected.txt: 
Added.
* LayoutTests/http/tests/contentextensions/block-object-element.html: Added.
* LayoutTests/http/tests/contentextensions/block-object-element.json: Added.
* Source/WebCore/html/HTMLPlugInElement.cpp:
(WebCore::HTMLPlugInElement::canLoadURL const):

Originally-landed-as: 305413.470@rapid/safari-7624.2.5.110-branch 
(f896e1bfd583). rdar://176062570
Canonical link: https://commits.webkit.org/313757@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications