ladybird/Services/WebContent
Andreas Kling ddbc3e2006 LibSandbox: Add macOS service sandboxing
Add Seatbelt-based macOS sandboxing for the browser service processes.
The shared profile builder grants only the filesystem, network, Mach,
and process execution permissions each service needs, with fatal sandbox
violation reporting enabled so denials are visible during development.

Wire sandbox profiles into WebContent, WebWorker, RequestServer,
ImageDecoder, and Compositor. Keep Landlock and Seatbelt APIs visible
only on the platforms that use them. Allow RequestServer resource
substitution files explicitly, preserve read access for read-write cache
paths, and only grant renderer process execution for an existing
Cranelift helper.
2026-06-10 21:16:41 +02:00
..
CMakeLists.txt LibSandbox: Add macOS service sandboxing 2026-06-10 21:16:41 +02:00
CompositorConnection.cpp Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
CompositorConnection.h Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
ConnectionFromClient.cpp LibWeb: Store custom property names as UTF-16 2026-06-09 11:48:02 +02:00
ConnectionFromClient.h LibWeb+UI/AppKit: Implement macOS IME support 2026-06-08 10:23:14 +09:00
ConsoleGlobalEnvironmentExtensions.cpp WebContent: Make more use of Value::as_if 2026-02-28 10:24:37 -05:00
ConsoleGlobalEnvironmentExtensions.h LibGC+Everywhere: Factor out a LibGC from LibJS 2024-11-15 14:49:20 +01:00
DevToolsConsoleClient.cpp LibJS: Drop source ranges from bytecode source maps 2026-05-14 09:41:03 +02:00
DevToolsConsoleClient.h LibJS+LibWeb: Make DOMException hold an [[ErrorData]] slot 2026-04-08 20:33:53 +02:00
Forward.h Compositor+LibWebView+WebContent: Scaffold opt-in Compositor process 2026-05-22 19:50:42 +01:00
main.cpp WebContent: Sandbox renderer processes on Linux 2026-06-09 19:35:09 +02:00
PageClient.cpp LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
PageClient.h LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
PageHost.cpp LibWebView+WebContent: Make page IDs browser-assigned 2026-05-30 17:30:00 +01:00
PageHost.h LibWebView+WebContent: Make page IDs browser-assigned 2026-05-30 17:30:00 +01:00
WebContentClient.ipc LibWeb: Remove unused test variant metadata API 2026-06-09 16:48:33 +02:00
WebContentCompositorHost.cpp Compositor+LibWeb+WebContent: Add visual context tree update IPC 2026-06-03 02:12:39 +01:00
WebContentCompositorHost.h LibWebView+WebContent: Remove compositor thread option 2026-05-25 00:45:24 +02:00
WebContentConsoleClient.cpp LibWeb: Remove ShadowRealm HTML integration 2026-04-05 13:57:58 +02:00
WebContentConsoleClient.h WebContent: Replace WeakPtr/Weakable with GC::Ptr for console client 2026-01-30 20:57:42 +01:00
WebContentServer.ipc LibWeb+UI/AppKit: Implement macOS IME support 2026-06-08 10:23:14 +09:00
WebDriverClient.ipc WebContent: Remove unused get_window_handle() IPC method 2026-02-15 08:21:41 -05:00
WebDriverConnection.cpp LibWeb: Store custom property names as UTF-16 2026-06-09 11:48:02 +02:00
WebDriverConnection.h LibGC: Default-construct RootVector from the global heap 2026-05-20 20:37:55 +02:00
WebDriverServer.ipc WebDriver: Send window handle asynchronously after WebContent connects 2026-02-15 08:21:41 -05:00
WebUIClient.ipc LibWeb+LibWebView+WebContent: Introduce a WebUI framework 2025-03-28 07:31:10 -04:00
WebUIConnection.cpp WebContent: Terminate immediately on client disconnect 2026-06-04 19:20:49 +02:00
WebUIConnection.h LibIPC+LibWeb+LibWebView+Services: Add IPC::TransportHandle 2026-03-12 20:32:55 +01:00
WebUIServer.ipc LibWeb+LibWebView+WebContent: Introduce a WebUI framework 2025-03-28 07:31:10 -04:00