← WebKit — 2026-W41
581b4484918e32d68543837c383423f55734666c Range.getBoundingClientRect() returns empty rects for content inside a content-visibility: hidden subtree
not a security fix
confidence 0.15
signal score 10.12
Source/WebCore/dom
Classified as not security-relevant.
Triage note: Range::getClientRects/boundingClientRect now call a shared updateLayoutForRangeBoundingRect that uses updateLayoutIgnorePendingStylesheets with a context element and TreatContentVisibility{Hidden,Auto}AsVisible options instead of plain updateLayout(); rendering-correctness change for content-visibility, not a memory-safety/security bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Range::getClientRects/boundingClientRect now call a shared updateLayoutForRangeBoundingRect that uses updateLayoutIgnorePendingStylesheets with a context element and TreatContentVisibility{Hidden,Auto}AsVisible options instead of plain updateLayout(); rendering-correctness change for content-visibility, not a memory-safety/security bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+4.87), null_guard (+1.95), area:Source/WebCore/dom (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page