← WebKit — 2026-W41
ac57a2af8c0e77f9ce5528d6ddb457a12a462bd3 Add a prevalent domain taint kind to JSC source taintedness
not a security fix
confidence 0.12
signal score 10.89
Source/JavaScriptCore/bytecode
Classified as not security-relevant.
Triage note: Renames SourceTaintedOrigin to SourceTaintedness and generalizes a single taint value into an EnumeratedArray keyed by SourceTaintKind (ScriptTrackingPrivacy, PrevalentDomain), adding markSourceAsPrevalentDomainTainted/isPrevalentDomainTaintedCodeOnStack. Anti-tracking privacy infrastructure extension, a feature rather than a fixed bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Renames SourceTaintedOrigin to SourceTaintedness and generalizes a single taint value into an EnumeratedArray keyed by SourceTaintKind (ScriptTrackingPrivacy, PrevalentDomain), adding markSourceAsPrevalentDomainTainted/isPrevalentDomainTaintedCodeOnStack. Anti-tracking privacy infrastructure extension, a feature rather than a fixed bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), security_assert (+3.0), null_guard (+2.59), clamp_saturate (+1.8), area:Source/JavaScriptCore/bytecode (+2.5), large_churn (-2.0)
Before / after
Loading diff…
On This Page