SandboxEscape
8 commits
Sandbox policy bypass, capability escalation across a process boundary, IPC forgery.
2026-W26 2026-06-27 – 07-03
- [macOS] Enable feature to block local file loads without a sandbox extension
- Validate EncodedFileData filenames in decidePolicyForNavigationAction
- FormDataReference validator accepts invalid sandbox extensions
- Compromised WebContent process can gain arbitrary file URL access by spoofing back/forward list messages
- The Network process should not create form data sandbox extensions
2026-W24 2026-06-13 – 19
- Missing validation for incoming file paths from web content process when attachment elements are enabled
- Move sandbox extension check related to local file loads from the WebContent process to the Networking process
2026-W22 2026-05-30 – 06-05
- Embedded content does not load in News App