← WebKit Silent-Fix Report — 2026-W25
791d472399 Message checks on Swift BackForwardList
severity medium
class Bypass
confidence 0.58
WebKit UIProcess BackForwardList
Primitive: missing IPC message checks on web-process item URLs
Triage note: IPC hardening validating attacker-controlled back-forward item URLs against file-path restrictions.
Triage note: IPC hardening validating attacker-controlled back-forward item URLs against file-path restrictions.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…