← WebKit — 2026-W38
2c67cb17aa9c83a86e3882206ecf8ad5aeea49c9 <img>.width and .height are not density-corrected when the image is not being rendered
not a security fix
confidence 0.12
signal score 7.5
Source/WebCore/html
Classified as not security-relevant.
Triage note: Extracts naturalSize() and makes width()/height() (no-renderer path) and naturalWidth()/naturalHeight() share it via unclampedImageSizeForRenderer. Refactor unifying size computation; the null-image guard is preserved, no bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Extracts naturalSize() and makes width()/height() (no-renderer path) and naturalWidth()/naturalHeight() share it via unclampedImageSizeForRenderer. Refactor unifying size computation; the null-image guard is preserved, no bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), null_guard (+1.2), area:Source/WebCore/html (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page