← WebKit Silent-Fix Report — 2026-W34
9c771fce0a906f72dba484655193f91a369f78d3 [Site Isolation] Some WKWebView-level APIs don't message all processes associated with the page
severity low
class LogicError
confidence 0.55
WebKit Site Isolation
Primitive: Suspend/stop WKWebView APIs did not reach all site-isolated processes
Triage note: stopLoading now iterates forEachWebContentProcess, and WebFrameProxy::prepareForProvisionalLoadInProcess returns nullopt when page->isSuspended() so a new process is not joined to a page _suspendPage: promised was frozen; closes a case where content keeps running in some processes contrary to the suspended-page guarantee.
Triage note: stopLoading now iterates forEachWebContentProcess, and WebFrameProxy::prepareForProvisionalLoadInProcess returns nullopt when page->isSuspended() so a new process is not joined to a page _suspendPage: promised was frozen; closes a case where content keeps running in some processes contrary to the suspended-page guarantee.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…