Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Are you not aware of how Safari works?

https://trac.webkit.org/wiki/WebKit2



I am, would you like to clarify whatever point it is that you're trying to make?


Why are you claiming that Safari uses a single process for everything except plugins?


I was talking about sandboxing. Multi-process rendering is not the same thing and does not intrinsically sandbox an app or make it more secure.


But Safari uses multiple processes and sandboxes those processes. You keep claiming that there is some difference between it and Chrome but you can't say what it is.


Safari is a sandboxed app but that covers everything, I have never read about individual process level sandboxing in Safari beyond the plugin sandbox. Are they using XPC or did they roll something custom?


WebProcess does have its own, more restrictive sandbox, although it's not as tight as Chrome's:

https://github.com/WebKit/webkit/blob/master/Source/WebKit2/...

For IPC they use something custom (part of the WebKit repo) called "CoreIPC".


That makes sense given that it's open source.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: