← WebKit Silent-Fix Report — 2026-W21
7d28e39dfc Content extensions should block plugin loads from embed and object elements
severity medium
class Bypass
confidence 0.55
WebKit ContentExtensions
Primitive: content-blocker load bypass
Triage note: Fixes a resource-blocking policy bypass where embed/object plugin loads evaded content blockers.
Triage note: Fixes a resource-blocking policy bypass where embed/object plugin loads evaded content blockers.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…