← WebKit Silent-Fix Report — 2026-W22
55bbd269b7 [AutoFill Debugging] Specifying a target node may trigger infinite recursion when extracting text
severity low
class LogicError
confidence 0.50
WebCore TextExtraction
Primitive: infinite recursion / stack exhaustion via same-origin iframe target node
Triage note: Prevents unbounded recursion (stack overflow DoS) though only on AutoFill-debug text-extraction path.
Triage note: Prevents unbounded recursion (stack overflow DoS) though only on AutoFill-debug text-extraction path.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…