ubuntu-webapps-bugs team mailing list archive

[Chris Coulson <chris.coulson@xxxxxxxxxxxxx>]

Landed again

** Changed in: oxide
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to webbrowser-app.
https://bugs.launchpad.net/bugs/1445673

Title:
  Shouldn't be able to pass QObjects to WebContextDelegateWorker

Status in Oxide Webview:
  Fix Released
Status in Web Browser App:
  Fix Released
Status in webbrowser-app package in Ubuntu:
  Fix Released

Bug description:
  Calling WebContextDelegateWorker::sendMessage allows the caller to
  pass a QObject in to the script running on another thread. This isn't
  safe, and we shouldn't allow this in the API at all

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1445673/+subscriptions