Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-84105

Out-of-proc networking causes firewall confusion

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: P3: Somewhat important P3: Somewhat important
    • 5.15.8, 6.2.2, 6.3.0 Alpha
    • 5.15.0 RC
    • WebEngine
    • Windows 10 IoT Enterprise 2019 LTSC where the firewall blocks both in- & outbound connections by default.
    • Windows
    • bc175fb62a1d2aba9c98ba761d5e21d3d7426678 (qt/qtwebengine/dev) c597f4bff14b11cc2d3fd9139b2afcff8a79cc1b (qt/qtwebengine/6.2) 8cbd59dd304688401525bfd96d558e6e8b53da8d (qt/qtwebengine/5.15)

      QtWebEngine seem to perform network connections through a separate QtWebEngineProcess.exe process. This can cause firewall configuration problems for locked-down systems, since whitelisting the Qt application EXE isn't sufficient to enable networking . Networking instead need to enabled by whitelisting QtWebEngineProcess.exe. However, this will also enable networking for any other QtWebEngine application installed to the same folder, which can be problematic.

      Request

      Please make it possible to make the QtWebEngine network communication in-process, so that firewall whitelisting becomes safe & intuitive. It would be preferable if in-process networking could be enabled through either a project build flag or run-time API.

      Steps to reproduce

      1. Build WebEngine Qt Quick Minimal Example.
      2. Configure Windows Defender Firewall to block all outbound connections by default (see screenshot).
      3. Whitelist "minimal.exe" in Windows Defender Firewall.
      4. Start "minimal.exe".
      5. Observe that app isn't able to display the web page.

        1. FirewallBlock.png
          22 kB
          Fredrik Orderud
        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            qt_webengine_team Qt WebEngine Team
            forderud Fredrik Orderud
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved:

                There is 1 open Gerrit change