← WebKit Silent-Fix Report — 2026-W21
3c5a9e4f2e [Site Isolation] Drag & drop is unable to recognize/find dragged files on disk
severity medium
class SandboxEscape
confidence 0.55
WebKit UIProcess / Site Isolation
Primitive: file sandbox extension scoped to wrong process
Triage note: Sandbox-extension scoping for dragged files under site isolation (file-access correctness).
Triage note: Sandbox-extension scoping for dragged files under site isolation (file-access correctness).
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…