← WebKit — 2026-W35
eb401eda2a846a5e0d205de597d779328b737326 [Site Isolation][macOS] Cannot autoscroll on cross-origin <iframe> content
not a security fix
confidence 0.15
signal score 6.25
Source/WebCore/page
Classified as not security-relevant.
Triage note: EventHandler::handleMousePressEvent now sets m_capturingMouseEventsElement to the remote subframe's ownerElement when m_mousePressed, mirroring the LocalFrame path, so a drag leaving the remote frame's bounds keeps being delivered to the owning process. This is site-isolation event-routing correctness, not a memory-safety or boundary-violation bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: EventHandler::handleMousePressEvent now sets m_capturingMouseEventsElement to the remote subframe's ownerElement when m_mousePressed, mirroring the LocalFrame path, so a drag leaving the remote frame's bounds keeps being delivered to the owning process. This is site-isolation event-routing correctness, not a memory-safety or boundary-violation bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), null_guard (+1.95), surgical (+1.3)
Before / after
Loading diff…
On This Page