← WebKit Silent-Fix Report — 2026-W21
84a08d4a5b NetworkConnectionToWebProcess::createSocketChannel should reject requests with an invalid URL
severity low
class LogicError
confidence 0.55
WebKit NetworkProcess IPC
Primitive: unvalidated URL from web process into NP
Triage note: IPC input-validation hardening (MESSAGE_CHECK) against a malformed URL from the web process; IPCTestingAPI crash test.
Triage note: IPC input-validation hardening (MESSAGE_CHECK) against a malformed URL from the web process; IPCTestingAPI crash test.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…