← WebKit — 2026-W38
4fcbbaa907493ffbb2021ba01ef57fe873d43914 [Cocoa] window.outerWidth/outerHeight may return 0 in cases where a client window is present
not a security fix
confidence 0.12
signal score 7.34
Source/WebKit/UIProcess
Classified as not security-relevant.
Triage note: Threads std::optional<FloatRect> through the windowFrame UIClient path so nullopt means 'client supplied none' and WebPageProxy substitutes the hosting window frame; a behavioral/plumbing change to getWindowFrame with no memory-safety or logic bug addressed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Threads std::optional<FloatRect> through the windowFrame UIClient path so nullopt means 'client supplied none' and WebPageProxy substitutes the hosting window frame; a behavioral/plumbing change to getWindowFrame with no memory-safety or logic bug addressed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: null_guard (+2.59), uaf_lifetime (+4.75)
Before / after
Loading diff…
On This Page