← WebKit Silent-Fix Report — 2026-W21
f5376181a6 REGRESSION(312211@main) Re-introduce URL protocol check for WebKitGTK
severity low
class CrossOrigin
confidence 0.55
WebCore DOM Element (GTK)
Primitive: local file path leaked via resolved URL in bindings
Triage note: Restores masking that returns the relative urlString for file:// docs, preventing local-path disclosure to script/bindings.
Triage note: Restores masking that returns the relative urlString for file:// docs, preventing local-path disclosure to script/bindings.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…