← WebKit — 2026-W41
814ebe2cfe6ab3aa3039250361171f51d3847da4 :open stops matching a select whose base appearance picker is still showing
not a security fix
confidence 0.18
signal score 7.17
Source/WebCore/html
Classified as not security-relevant.
Triage note: Refactors select popup/picker state behind isOpen()/pickerPopoverIsShowing()/setSizeAndMultiple() and re-checks renderer()/usesMenuList() after updateLayout in showPopup(). Mostly a state-management refactor; the reentrancy re-checks are defensive hardening rather than a clearly identified exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Refactors select popup/picker state behind isOpen()/pickerPopoverIsShowing()/setSizeAndMultiple() and re-checks renderer()/usesMenuList() after updateLayout in showPopup(). Mostly a state-management refactor; the reentrancy re-checks are defensive hardening rather than a clearly identified exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), bounds_guard (+2.0), null_guard (+1.2), msg_noise (-2.5), area:Source/WebCore/html (+2.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page