[hackerone] 313440 (quarantine)

[jumde]

https://hackerone.com/bugs?report_id=313440

[jumde]

Verification Steps:

• Open - https://nodejs.org/dist/v8.9.4/node-v8.9.4.pkg
• Run -

$ xattr ~/Downloads/node-v8.9.4.pkg
com.apple.metadata:kMDItemWhereFroms
com.apple.quarantine

Quarantine flag should be enabled for the file

• Check if brave updates are functional

[alexwykoff]

@diracdeltas @jumde is this release blocking?

[diracdeltas]

if possible

[bsclifton]

@jumde @diracdeltas this requires this Muon change, right?
brave/muon#484

If we get the Muon PR merged into 5.0.x, I think we should be good to go 😄

[diracdeltas]

@bsclifton yup, the muon change will fix the issue. It's opened here so QA has steps to verify it. (In particular, they should verify that the change does not break brave autoupdate)

[bsclifton]

Moving to 0.22.x; we're going to have 0.21.x-C65 only contain the Chromium upgrade 😄 👍

[LaurenWags]

Verified on macOS 10.12.6 x64 using the following build:

• 0.22.7 8bb7e77
• libchromiumcontent: 65.0.3325.181
• muon: 5.1.1

Updated from v0.22.6 to v0.22.7 on Win7 x64:

• 0.22.7 8bb7e77
• libchromiumcontent: 65.0.3325.181
• muon: 5.1.1

[kjozwiak]

Specific to mac and the gatekeeper.

[cndouglas]

+1 from me (#13085). Thanks for fixing!

[bsclifton]

Reverted to fix #13817

Reverted brave/muon#570 in Muon and #13819 on browser-laptop