← WebKit Silent-Fix Report — 2026-W23
00a2a6621815015a6a81b1d6bcf2e82666de1f45 [Site Isolation] Provisional page's top document sync data corrupts the current page's processes
severity medium
class CrossOrigin
confidence 0.55
Site Isolation BackForwardCache
Primitive: Provisional page top-document sync data corrupts current page's processes under Site Isolation
Triage note: Adds BackForwardCache::get(BackForwardFrameItemIdentifier) and propagates top document URL so a provisional page's sync data is resolved against the correct cached page; the titled bug is cross-process state corruption of the current page across the site-isolation boundary.
Triage note: Adds BackForwardCache::get(BackForwardFrameItemIdentifier) and propagates top document URL so a provisional page's sync data is resolved against the correct cached page; the titled bug is cross-process state corruption of the current page across the site-isolation boundary.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…