dmaax/ladybird
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ladybird/Services/WebContent
History
Andreas Kling 0c7fda8735 WebContent: Sandbox renderer processes on Linux 
Add opt-in Linux renderer sandbox support to WebContent and WebWorker.
Ladybird and test-web pass --enable-sandbox through when requested, and
the renderer services only install the shared sandbox when that flag is
present.

Share one renderer policy for both services. Allow resource, font,
shared library, WebGL, Wasm, audio, and local IPC paths needed at
runtime, while keeping renderer filesystem writes mediated by Landlock.

Allow Mesa and PulseAudio to probe their standard runtime state without
escaping the renderer sandbox. Return EPERM for scheduler and priority
changes so library initialization can fall back instead of crashing on a
seccomp violation.
2026-06-09 19:35:09 +02:00
..
CMakeLists.txt WebContent: Sandbox renderer processes on Linux 2026-06-09 19:35:09 +02:00
CompositorConnection.cpp Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
CompositorConnection.h Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
ConnectionFromClient.cpp LibWeb: Store custom property names as UTF-16 2026-06-09 11:48:02 +02:00
ConnectionFromClient.h LibWeb+UI/AppKit: Implement macOS IME support 2026-06-08 10:23:14 +09:00
ConsoleGlobalEnvironmentExtensions.cpp WebContent: Make more use of Value::as_if 2026-02-28 10:24:37 -05:00
ConsoleGlobalEnvironmentExtensions.h LibGC+Everywhere: Factor out a LibGC from LibJS 2024-11-15 14:49:20 +01:00
DevToolsConsoleClient.cpp LibJS: Drop source ranges from bytecode source maps 2026-05-14 09:41:03 +02:00
DevToolsConsoleClient.h LibJS+LibWeb: Make DOMException hold an [[ErrorData]] slot 2026-04-08 20:33:53 +02:00
Forward.h Compositor+LibWebView+WebContent: Scaffold opt-in Compositor process 2026-05-22 19:50:42 +01:00
main.cpp WebContent: Sandbox renderer processes on Linux 2026-06-09 19:35:09 +02:00
PageClient.cpp LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
PageClient.h LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
PageHost.cpp LibWebView+WebContent: Make page IDs browser-assigned 2026-05-30 17:30:00 +01:00
PageHost.h LibWebView+WebContent: Make page IDs browser-assigned 2026-05-30 17:30:00 +01:00
WebContentClient.ipc LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
WebContentCompositorHost.cpp Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
WebContentCompositorHost.h LibWebView+WebContent: Remove compositor thread option 2026-05-25 00:45:24 +02:00
WebContentConsoleClient.cpp LibWeb: Remove ShadowRealm HTML integration 2026-04-05 13:57:58 +02:00
WebContentConsoleClient.h WebContent: Replace WeakPtr/Weakable with GC::Ptr for console client 2026-01-30 20:57:42 +01:00
WebContentServer.ipc LibWeb+UI/AppKit: Implement macOS IME support 2026-06-08 10:23:14 +09:00
WebDriverClient.ipc WebContent: Remove unused get_window_handle() IPC method 2026-02-15 08:21:41 -05:00
WebDriverConnection.cpp LibWeb: Store custom property names as UTF-16 2026-06-09 11:48:02 +02:00
WebDriverConnection.h LibGC: Default-construct RootVector from the global heap 2026-05-20 20:37:55 +02:00
WebDriverServer.ipc WebDriver: Send window handle asynchronously after WebContent connects 2026-02-15 08:21:41 -05:00
WebUIClient.ipc LibWeb+LibWebView+WebContent: Introduce a WebUI framework 2025-03-28 07:31:10 -04:00
WebUIConnection.cpp WebContent: Terminate immediately on client disconnect 2026-06-04 19:20:49 +02:00
WebUIConnection.h LibIPC+LibWeb+LibWebView+Services: Add IPC::TransportHandle 2026-03-12 20:32:55 +01:00
WebUIServer.ipc LibWeb+LibWebView+WebContent: Introduce a WebUI framework 2025-03-28 07:31:10 -04:00