← WebKit Silent-Fix Report — 2026-W21

c0c27847a6  [iOS] Use temp directories per App for extensions

severity low class Bypass confidence 0.40 WebKit XPCService (iOS)
Per Arne Vollan Wed May 20 16:30:31 2026 -0700 full: c0c27847a68af8ebb1bd77b5908c6b4ca54f9ed0 bug report ↗ view on GitHub ↗
Primitive: per-app temp dir isolation
Triage note: Isolates temp directories per hosting app, a data-isolation improvement under ExtensionKit.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…