Bug 187494

Summary: MiniBrowser lacks entitlements to add extensions
Product: WebKit Reporter: Jeff Johnson <opendarwin>
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Minor CC: jberlin, joepeck
Priority: P2    
Version: WebKit Local Build   
Hardware: Mac   
OS: macOS 10.13   

Description Jeff Johnson 2018-07-09 17:09:56 PDT
Steps to Reproduce:
1. Build WebKit on macOS 10.13
2. Debug MiniBrowser
3. Open "Debug" menu
4. Select "Show Extensions Manager"
5. Click the + button

This fails because of sandboxing. To fix, you just need to add the User Selected File sandbox entitlement to the MiniBrowser target App Sandbox Capabilities:

$ git diff
diff --git a/Tools/MiniBrowser/MiniBrowser.entitlements b/Tools/MiniBrowser/MiniBrowser.entitlements
index ea26ab24210..f5bddd5e533 100644
--- a/Tools/MiniBrowser/MiniBrowser.entitlements
+++ b/Tools/MiniBrowser/MiniBrowser.entitlements
@@ -4,6 +4,8 @@
 <dict>
        <key>com.apple.security.app-sandbox</key>
        <true/>
+       <key>com.apple.security.files.user-selected.read-only</key>
+       <true/>
        <key>com.apple.security.network.client</key>
        <true/>
        <key>com.apple.security.temporary-exception.files.absolute-path.read-only</key>
Comment 1 Joseph Pecoraro 2019-02-08 15:15:02 PST
Oops, thanks for the heads up. This is getting addressed in bug 192431.

*** This bug has been marked as a duplicate of bug 192431 ***