← WebKit — 2026-W35

66e2e265cfeecef8ddee8ba16e16acbf35644a7b  Make CSSTokenizer work efficiently with StringViews

not a security fix confidence 0.1 signal score 7.17 Source/WebCore/css
Classified as not security-relevant.
Triage note: Converts CSSTokenizer/CSSTokenizerInputStream to take StringView with LIFETIME_BOUND and a StringView-returning preprocessString; callers add local backing variables to keep the view alive. API/perf refactor done with lifetime care, not a fix of an existing bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), msg_noise (-2.5), area:Source/WebCore/css (+2.0)

Before / after

Loading diff…
On This Page