← WebKit Silent-Fix Report — 2026-W23
3f1ad2f2e5cc888d49b13d08f41d2b16a33f1be4 Embedded content does not load in News App
severity medium
class SandboxEscape
confidence 0.55
Entitlements/Sandbox
Primitive: Apply WebContent sandbox entitlements to Mac Catalyst shared WebContent process
Triage note: process-entitlements.sh now calls webcontent_sandbox_entitlements from maccatalyst_process_webcontent_shared_entitlements, applying the sandbox profile to a WebContent process that otherwise lacked it; sandbox-hardening of the renderer.
Triage note: process-entitlements.sh now calls webcontent_sandbox_entitlements from maccatalyst_process_webcontent_shared_entitlements, applying the sandbox profile to a WebContent process that otherwise lacked it; sandbox-hardening of the renderer.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…