← WebKit Silent-Fix Report — 2026-W21
b9e630270a Fix fragment parsing of xmlns="" inheritance and annotation-xml encoding
severity low
class Bypass
confidence 0.40
WebCore HTML/XML fragment parsing
Primitive: namespace/integration-point confusion in fragment parsing
Triage note: Fragment-parsing namespace and integration-point handling underlies mutation-XSS/sanitizer soundness, so it carries a mild bypass angle.
Triage note: Fragment-parsing namespace and integration-point handling underlies mutation-XSS/sanitizer soundness, so it carries a mild bypass angle.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…