← WebKit Silent-Fix Report — 2026-W23
9682d18068ac9fe96d17f82577f5c3afb803355e [iOS] WebKit process extensions should have separate temp directories per App
severity low
class LogicError
confidence 0.55
WebKit XPCService iOS
Primitive: iOS process extensions share a temp directory across apps
Triage note: XPCServiceMain now derives the user dir suffix from the per-app ui-process-name (setUserDirSuffix(move(uiProcessName))) under EXTENSIONKIT for WebContent/GPU processes instead of a constant service name, giving each host app its own temp directory. Isolation hardening preventing cross-app temp data access; local, no web-reachable memory corruption.
Triage note: XPCServiceMain now derives the user dir suffix from the per-app ui-process-name (setUserDirSuffix(move(uiProcessName))) under EXTENSIONKIT for WebContent/GPU processes instead of a constant service name, giving each host app its own temp directory. Isolation hardening preventing cross-app temp data access; local, no web-reachable memory corruption.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…