202071 2019-09-20 20:52:25 -0700 [GTK] Cannot perform most local loads with sandbox enabled 2020-02-05 10:06:08 -0800 1 1 1 Unclassified WebKit WebKitGTK Other Unspecified Unspecified RESOLVED FIXED P2 Normal --- 206533 1 wblaszcz mcatanzaro afranke bugs-noreply cgarcia commit-queue mcatanzaro pgriffis renodr oldest_to_newest 1573033 0 wblaszcz 2019-09-20 20:52:25 -0700 When trying to view local files via Epiphany-3.34.0, clicking on most directories does nothing. i.e. does not display the contents of that directory. I say most, as some directories do work. .cache .local and .config from the home directory do work. I know it's not a permission issue of the directories as I can rename one of those three working directories into something else, and I can no longer traverse into that directory. e.g. mv .cache .cache.org Of the non working directories, if I right click and select Open Link in New Tab, then that does open a new tab with the contents of the directory. I can revert back to Epiphany-3.32.5 and the problem goes away. The system I'm using is self built from source (based on LFS) with the latest GNOME 3.34 components. See https://gitlab.gnome.org/GNOME/epiphany/issues/934 The issue goes away if WebKitGTK is built with a -DENABLE_BUBBLEWRAP_SANDBOX=OFF parameter which is not an ideal work around. 1613209 1 389302 mcatanzaro 2020-01-30 16:37:26 -0800 Created attachment 389302 Patch 1613211 2 389303 mcatanzaro 2020-01-30 16:40:27 -0800 Created attachment 389303 Patch 1613212 3 mcatanzaro 2020-01-30 16:41:15 -0800 Sorry for the long delay. :( The problem was an old security check that's incompatible with our sandbox. 1613300 4 389303 cgarcia 2020-01-31 00:18:48 -0800 Comment on attachment 389303 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=389303&action=review > Source/WebCore/page/SecurityOrigin.cpp:371 > -#if !PLATFORM(IOS_FAMILY) > +#if !PLATFORM(IOS_FAMILY) && !ENABLE(BUBBLEWRAP_SANDBOX) I guess we should disable this when the sandbox is enabled, not only when building with sandbox support, no? 1613337 5 mcatanzaro 2020-01-31 05:48:53 -0800 (In reply to Carlos Garcia Campos from comment #4) > I guess we should disable this when the sandbox is enabled, not only when > building with sandbox support, no? No, because there's no good way to check at this level if the sandbox is enabled or not. We could test if .flatpak-info exists on disk, but that's just bad design. So if keeping the same-volume check is desired, someone (not me :) will need to reimplement it at the network process level. I'm not even sure if we ever implemented it for soup ports in the first place. I can see the curl bug to do so, bug #166780. The cross-platform bug is bug #158552, but I can't see that anymore. From there, you can navigate to the soup bug to check if we ever implemented it or whether we left the bug open for three years, just as likely. 1614657 6 mcatanzaro 2020-02-04 11:42:10 -0800 Ping :) 1614969 7 389303 cgarcia 2020-02-05 00:40:23 -0800 Comment on attachment 389303 Patch Ok, let's do this for now 1615100 8 389303 commit-queue 2020-02-05 10:06:07 -0800 Comment on attachment 389303 Patch Clearing flags on attachment: 389303 Committed r255824: <https://trac.webkit.org/changeset/255824> 1615101 9 commit-queue 2020-02-05 10:06:08 -0800 All reviewed patches have been landed. Closing bug. 389302 2020-01-30 16:37:26 -0800 2020-01-30 16:40:25 -0800 Patch bug-202071-20200130183725.patch text/plain 2179 mcatanzaro U3VidmVyc2lvbiBSZXZpc2lvbjogMjU1MzYyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMmY4OWI0MmU0MjVkNDg5 Y2Q3OGZhODA5Mzg4ZTdhZjQ2ZTRhOTRjMS4uNmY1MGRjODMwYmRmMmU5NWU1YjY5ZDFkNjFhNzI4 M2Y4MTE1ZjNkMyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI0IEBACisyMDIwLTAxLTMwICBNaWNo YWVsIENhdGFuemFybyAgPG1jYXRhbnphcm9AZ25vbWUub3JnPgorCisgICAgICAgIFtHVEtdIENh bm5vdCBwZXJmb3JtIG1vc3QgbG9jYWwgbG9hZHMgd2l0aCBzYW5kYm94IGVuYWJsZWQKKyAgICAg ICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIwMjA3MQorCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFNlY3VyaXR5T3JpZ2lu OjpjYW5EaXNwbGF5IGlzIGltcHJvcGVybHkgY2hlY2tpbmcgd2hldGhlciB0aGUgdGFyZ2V0IGZp bGUgVVJMIHBvaW50cyB0byBhCisgICAgICAgIGZpbGUgb24gdGhlIHN5c3RlbSAidm9sdW1lIiBh cyB0aGUgc291cmNlIGZpbGUuIFRoYXQgY2FuJ3QgaGFwcGVuIGhlcmUgYmVjYXVzZSB0aGlzIGNv ZGUgaXMKKyAgICAgICAgcnVubmluZyBpbiB0aGUgd2ViIHByb2Nlc3MsIGJ1dCBvbmx5IHRoZSBu ZXR3b3JrIHByb2Nlc3MgaGFzIGFjY2VzcyB0byB0aGUgdW5zYW5kYm94ZWQKKyAgICAgICAgZmls ZXN5c3RlbS4gVGhpcyBjb2RlIGNhbiBvbmx5IGNoZWNrIHdoZXRoZXIgdGhlIHRhcmdldCBmaWxl IGV4aXN0cyB3aXRoaW4gdGhlIHNhbmRib3gncworICAgICAgICBtb3VudCBuYW1lc3BhY2UsIGJ1 dCB0aGF0J3Mgbm90IHdoYXQgd2Ugd2FudCB0byBkbyBiZWNhdXNlIHdlJ3JlIG5vdCBnb2luZyB0 byBsb2FkIHRoYXQKKyAgICAgICAgZmlsZSwgd2UncmUgZ29pbmcgdG8gYXNrIHRoZSBuZXR3b3Jr IHByb2Nlc3MgdG8gbG9hZCB0aGUgZmlsZSB3aXRoIHRoZSBzYW1lIHBhdGggb3V0c2lkZSB0aGUK KyAgICAgICAgbW91bnQgbmFtZXNwYWNlLgorCisgICAgICAgIFdlIGNhbiBwcm9iYWJseSBsaXZl IHdpdGhvdXQgdGhpcyBjaGVjay4gQnV0IGlmIGJyaW5naW5nIGl0IGJhY2sgaXMgZGVzaXJlZCwg aXQgaGFzIHRvIGJlCisgICAgICAgIGRvbmUgc29tZXBsYWNlIHRvdGFsbHkgZGlmZmVyZW50LCBp biBuZXR3b3JrIHByb2Nlc3MgY29kZSByYXRoZXIgdGhhbiB3ZWIgcHJvY2VzcyBjb2RlLgorCisg ICAgICAgICogcGFnZS9TZWN1cml0eU9yaWdpbi5jcHA6CisgICAgICAgIChXZWJDb3JlOjpTZWN1 cml0eU9yaWdpbjo6Y2FuRGlzcGxheSBjb25zdCk6CisKIDIwMjAtMDEtMjkgIFBlbmcgTGl1ICA8 cGVuZy5saXU2QGFwcGxlLmNvbT4KIAogICAgICAgICBBbHdheXMgZW5hYmxlIHNvbWUgbG9nIG1l c3NhZ2VzIHJlbGF0ZWQgdG8gYXVkaW8gdHJhY2tzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29y ZS9wYWdlL1NlY3VyaXR5T3JpZ2luLmNwcCBiL1NvdXJjZS9XZWJDb3JlL3BhZ2UvU2VjdXJpdHlP cmlnaW4uY3BwCmluZGV4IDFiMjlhZGQzMGYzYTkwYmIzZTBkMDA4MWNjOGVmN2E3OWNmN2Y4OWQu LjZkODQ3ZWI0ZDg5OTc2ODcyNzIzYzc0YjRhZjViMWFhZGI0ZDk3MjggMTAwNjQ0Ci0tLSBhL1Nv dXJjZS9XZWJDb3JlL3BhZ2UvU2VjdXJpdHlPcmlnaW4uY3BwCisrKyBiL1NvdXJjZS9XZWJDb3Jl L3BhZ2UvU2VjdXJpdHlPcmlnaW4uY3BwCkBAIC0zNjgsNyArMzY4LDcgQEAgYm9vbCBTZWN1cml0 eU9yaWdpbjo6Y2FuRGlzcGxheShjb25zdCBVUkwmIHVybCkgY29uc3QKICAgICBpZiAodXJsLnBh dGhFbmQoKSA+IG1heGltdW1VUkxTaXplKQogICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgCi0j aWYgIVBMQVRGT1JNKElPU19GQU1JTFkpCisjaWYgIVBMQVRGT1JNKElPU19GQU1JTFkpICYmICFF TkFCTEUoQlVCQkxFV1JBUF9TQU5EQk9YKQogICAgIGlmIChtX2RhdGEucHJvdG9jb2wgPT0gImZp bGUiICYmIHVybC5pc0xvY2FsRmlsZSgpICYmICFGaWxlU3lzdGVtOjpmaWxlc0hhdmVTYW1lVm9s dW1lKG1fZmlsZVBhdGgsIHVybC5maWxlU3lzdGVtUGF0aCgpKSkKICAgICAgICAgcmV0dXJuIGZh bHNlOwogI2VuZGlmCg== 389303 2020-01-30 16:40:27 -0800 2020-02-05 10:06:07 -0800 Patch bug-202071-20200130184026.patch text/plain 2214 mcatanzaro U3VidmVyc2lvbiBSZXZpc2lvbjogMjU1NDcxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggYjJlZGM5MjZkMWYzM2Rh NjFlM2Y3MzhmZWJjZmEwYjVhMDllNWVkOC4uMmNjOWQ2YTgxMGEwNjQ2YjQ4NDlhMzRhMGJiNmVj NzZiNjhkMDA3YyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI0IEBACisyMDIwLTAxLTMwICBNaWNo YWVsIENhdGFuemFybyAgPG1jYXRhbnphcm9AZ25vbWUub3JnPgorCisgICAgICAgIFtHVEtdIENh bm5vdCBwZXJmb3JtIG1vc3QgbG9jYWwgbG9hZHMgd2l0aCBzYW5kYm94IGVuYWJsZWQKKyAgICAg ICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIwMjA3MQorCisgICAg ICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFNlY3VyaXR5T3JpZ2lu OjpjYW5EaXNwbGF5IGlzIGltcHJvcGVybHkgY2hlY2tpbmcgd2hldGhlciB0aGUgdGFyZ2V0IGZp bGUgVVJMIHBvaW50cyB0byBhCisgICAgICAgIGZpbGUgb24gdGhlIHNhbWUgInZvbHVtZSIgKG1v dW50IHBvaW50KSBhcyB0aGUgc291cmNlIGZpbGUuIFRoYXQgY2FuJ3QgaGFwcGVuIGhlcmUgYmVj YXVzZQorICAgICAgICB0aGlzIGNvZGUgaXMgcnVubmluZyBpbiB0aGUgd2ViIHByb2Nlc3MsIGJ1 dCBvbmx5IHRoZSBuZXR3b3JrIHByb2Nlc3MgaGFzIGFjY2VzcyB0byB0aGUKKyAgICAgICAgdW5z YW5kYm94ZWQgZmlsZXN5c3RlbS4gVGhpcyBjb2RlIGNhbiBvbmx5IGNoZWNrIHdoZXRoZXIgdGhl IHRhcmdldCBmaWxlIGV4aXN0cyB3aXRoaW4gdGhlCisgICAgICAgIHNhbmRib3gncyBtb3VudCBu YW1lc3BhY2UsIGJ1dCB0aGF0J3Mgbm90IHdoYXQgd2Ugd2FudCB0byBkbyBiZWNhdXNlIHdlJ3Jl IG5vdCBnb2luZyB0byBsb2FkCisgICAgICAgIHRoYXQgZmlsZSwgd2UncmUgZ29pbmcgdG8gYXNr IHRoZSBuZXR3b3JrIHByb2Nlc3MgdG8gbG9hZCB0aGUgZmlsZSB3aXRoIHRoZSBzYW1lIHBhdGgK KyAgICAgICAgb3V0c2lkZSB0aGUgbW91bnQgbmFtZXNwYWNlLgorCisgICAgICAgIFdlIGNhbiBw cm9iYWJseSBsaXZlIHdpdGhvdXQgdGhpcyBjaGVjay4gQnV0IGlmIGJyaW5naW5nIGl0IGJhY2sg aXMgZGVzaXJlZCwgaXQgaGFzIHRvIGJlCisgICAgICAgIGRvbmUgc29tZXBsYWNlIHRvdGFsbHkg ZGlmZmVyZW50LCBpbiBuZXR3b3JrIHByb2Nlc3MgY29kZSByYXRoZXIgdGhhbiB3ZWIgcHJvY2Vz cyBjb2RlLgorCisgICAgICAgICogcGFnZS9TZWN1cml0eU9yaWdpbi5jcHA6CisgICAgICAgIChX ZWJDb3JlOjpTZWN1cml0eU9yaWdpbjo6Y2FuRGlzcGxheSBjb25zdCk6CisKIDIwMjAtMDEtMzAg IFRpbSBIb3J0b24gIDx0aW1vdGh5X2hvcnRvbkBhcHBsZS5jb20+CiAKICAgICAgICAgQWRkIGEg cXVpcmsgdG8gb3B0IFR3aXR0ZXIgb3V0IG9mIHRoZSBub24tb3ZlcmxhaWQgbWluaW1pemVkIGlu cHV0IHZpZXcKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BhZ2UvU2VjdXJpdHlPcmlnaW4u Y3BwIGIvU291cmNlL1dlYkNvcmUvcGFnZS9TZWN1cml0eU9yaWdpbi5jcHAKaW5kZXggMWIyOWFk ZDMwZjNhOTBiYjNlMGQwMDgxY2M4ZWY3YTc5Y2Y3Zjg5ZC4uNmQ4NDdlYjRkODk5NzY4NzI3MjNj NzRiNGFmNWIxYWFkYjRkOTcyOCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcGFnZS9TZWN1 cml0eU9yaWdpbi5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvcGFnZS9TZWN1cml0eU9yaWdpbi5j cHAKQEAgLTM2OCw3ICszNjgsNyBAQCBib29sIFNlY3VyaXR5T3JpZ2luOjpjYW5EaXNwbGF5KGNv bnN0IFVSTCYgdXJsKSBjb25zdAogICAgIGlmICh1cmwucGF0aEVuZCgpID4gbWF4aW11bVVSTFNp emUpCiAgICAgICAgIHJldHVybiBmYWxzZTsKICAgICAKLSNpZiAhUExBVEZPUk0oSU9TX0ZBTUlM WSkKKyNpZiAhUExBVEZPUk0oSU9TX0ZBTUlMWSkgJiYgIUVOQUJMRShCVUJCTEVXUkFQX1NBTkRC T1gpCiAgICAgaWYgKG1fZGF0YS5wcm90b2NvbCA9PSAiZmlsZSIgJiYgdXJsLmlzTG9jYWxGaWxl KCkgJiYgIUZpbGVTeXN0ZW06OmZpbGVzSGF2ZVNhbWVWb2x1bWUobV9maWxlUGF0aCwgdXJsLmZp bGVTeXN0ZW1QYXRoKCkpKQogICAgICAgICByZXR1cm4gZmFsc2U7CiAjZW5kaWYK