touch-packages team mailing list archive

Thread
Date

[Bug 1445673] Re: Shouldn't be able to pass QObjects to WebContextDelegateWorker

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: Olivier Tilloy <olivier.tilloy@xxxxxxxxxxxxx>
Date: Tue, 02 Jun 2015 21:09:21 -0000
Reply-to: Bug 1445673 <1445673@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: webbrowser-app
       Status: In Progress => Fix Released

** Changed in: webbrowser-app (Ubuntu)
     Assignee: (unassigned) => Olivier Tilloy (osomon)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1445673

Title:
  Shouldn't be able to pass QObjects to WebContextDelegateWorker

Status in Oxide Webview:
  Triaged
Status in Web Browser App:
  Fix Released
Status in webbrowser-app package in Ubuntu:
  Fix Released

Bug description:
  Calling WebContextDelegateWorker::sendMessage allows the caller to
  pass a QObject in to the script running on another thread. This isn't
  safe, and we shouldn't allow this in the API at all

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1445673/+subscriptions