← WebKit Silent-Fix Report — 2026-W23
89f18277fe742a66605ffb4401a3732ae4bff55b Cherry pick 305413.913@safari-7624-branch (58357344684a)
severity medium
class Bypass
confidence 0.55
WebKit WebProcessProxy origin check
Primitive: Incorrect committed-client-origin authorization in WebProcessProxy
Triage note: Cherry-pick reworks hasCommittedClientOrigin to check m_committedClientOrigins first and return false by default instead of falling through, tightening the per-process origin authorization used to gate cross-process resource access.
Triage note: Cherry-pick reworks hasCommittedClientOrigin to check m_committedClientOrigins first and return false by default instead of falling through, tightening the per-process origin authorization used to gate cross-process resource access.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…