ubuntu-webapps-bugs team mailing list archive

[Chris Coulson <chris.coulson@xxxxxxxxxxxxx>]

Public bug reported:

Calling WebContextDelegateWorker::sendMessage allows the caller to pass
a QObject in to the script running on another thread. This isn't safe,
and we shouldn't allow this in the API at all

** Affects: oxide
     Importance: Medium
     Assignee: Chris Coulson (chrisccoulson)
         Status: Fix Released

** Changed in: oxide
   Importance: Undecided => Medium

** Changed in: oxide
       Status: New => In Progress

** Changed in: oxide
     Assignee: (unassigned) => Chris Coulson (chrisccoulson)

** Changed in: oxide
       Status: In Progress => Fix Released

** Changed in: oxide
    Milestone: None => branch-1.8

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to Oxide.
https://bugs.launchpad.net/bugs/1445673

Title:
  Shouldn't be able to pass QObjects to WebContextDelegateWorker

Status in Oxide Webview:
  Fix Released

Bug description:
  Calling WebContextDelegateWorker::sendMessage allows the caller to
  pass a QObject in to the script running on another thread. This isn't
  safe, and we shouldn't allow this in the API at all

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1445673/+subscriptions