← WebKit — 2026-W35
63519535440f8da30cfffdabab46c68dda9f45a9 Document named properties should not filter object and embed elements by exposedness
not a security fix
confidence 0.15
signal score 8.47
Source/WebCore/html
Classified as not security-relevant.
Triage note: Rewrites HTMLDocument::namedItem to use documentNamedItemContainsMultipleElements/documentNamedItem and drops the isExposed() checks in DocumentNameCollection::elementMatches. A spec-alignment/behavior refactor of named property access; no clear memory-safety or exploitable logic bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Rewrites HTMLDocument::namedItem to use documentNamedItemContainsMultipleElements/documentNamedItem and drops the isExposed() checks in DocumentNameCollection::elementMatches. A spec-alignment/behavior refactor of named property access; no clear memory-safety or exploitable logic bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), area:Source/WebCore/html (+2.0)
Before / after
Loading diff…
On This Page