← WebKit Silent-Fix Report — 2026-W23
0e4040cd014e6b637fe4390c547e1ab82bbf18d7 Show safe browsing warning immediately when lookup completes
severity medium
class Bypass
confidence 0.55
WebKit UIProcess SafeBrowsing
Primitive: Safe Browsing warning not reliably shown for the correct navigation
Triage note: _showWarningView and the warning-shown accounting are reworked to track safeBrowsingWarningShownForNavigation() by navigationID, so a stale warning for a superseded navigation is no longer mis-applied and the warning is shown immediately for the right load. Closes a potential safe-browsing warning bypass/race.
Triage note: _showWarningView and the warning-shown accounting are reworked to track safeBrowsingWarningShownForNavigation() by navigationID, so a stale warning for a superseded navigation is no longer mis-applied and the warning is shown immediately for the right load. Closes a potential safe-browsing warning bypass/race.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…