Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • I Initiatives
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 16
    • Issues 16
    • List
    • Boards
    • Service Desk
    • Milestones
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • GNOMEGNOME
  • Initiatives
  • Issues
  • #19
Closed
Open
Issue created Jun 16, 2020 by Michael Catanzaro@mcatanzaroDeveloper10 of 16 checklist items completed10/16 checklist items

Sandbox all the WebKit!

Description

Improve security of GNOME applications that render web content by doing so in a bubblewrap sandbox.

Goals

Every application using WebKitGTK should opt-in to the web process sandbox by calling webkit_web_context_set_sandbox_enabled(). See this blog post for context.

Scope

Everything that uses WebKitGTK

People on charge & contact

Michael Catanzaro (@mcatanzaro)

Instructions to achieve the goals

https://gitlab.gnome.org/GNOME/Initiatives/-/wikis/Sandbox-all-the-WebKit!

Label for tracking the initiative

Initiative: Sandbox all the WebKit!

Text for the initiative issue in projects

Every application using WebKitGTK should opt-in to the web process sandbox by calling webkit_web_context_set_sandbox_enabled(). See #19 for details.

List of projects & tasks

GNOME

  • devhelp
  • epiphany
  • evolution-data-server
  • gnome-boxes
  • gnome-builder
  • gnome-initial-setup
  • gnome-maps
  • gnome-online-accounts
  • sushi
  • yelp

World

  • bijiben
  • evolution, reverted awaiting printing
  • geary (waiting for printing)
  • glade
  • gnome-documents (archived)
  • libgepub

How can I help

Submit merge requests. It's easy!

If you see any GNOME software included in gnome-build-meta that uses WebKit but is not listed here, it is missing a dependency in gnome-build-meta. Please report it.

Edited Jun 01, 2022 by Michael Catanzaro
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking