← WebKit — 2026-W39
a703a41761789590bae9a09389b4a7e18dbf4531 [content-visibility] Out-of-flow content inside a skipped flex container is left dirty
not a security fix
confidence 0.15
signal score 8.17
Source/WebCore/rendering
Classified as not security-relevant.
Triage note: RenderFlexibleBox::layoutBlock clears needsLayout on children when the box is a skipped-content layout root (content-visibility). Layout-state correctness, possibly an assertion/crash guard, not an attacker-reachable memory-safety bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: RenderFlexibleBox::layoutBlock clears needsLayout on children when the box is a skipped-content layout root (content-visibility). Layout-state correctness, possibly an assertion/crash guard, not an attacker-reachable memory-safety bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+4.87), area:Source/WebCore/rendering (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page