← WebKit Silent-Fix Report — 2026-W34

273837bcb9abb0793a8d7a7002c27572eb37f850  [Site Isolation] endPrinting is routed to the main-frame process, leaking print state in cross-site subframe processes.

severity medium class CrossOrigin confidence 0.55 Site Isolation / printing
Matt Woodrow Thu Aug 20 00:42:31 2026 -0700 full: 273837bcb9abb0793a8d7a7002c27572eb37f850 bug report ↗ view on GitHub ↗
Primitive: endPrinting routed to main-frame process leaks print state across cross-site frames
Triage note: Replaces a single boolean m_isInPrintingMode with a per-frame m_printingFrameID so endPrinting targets the frame that began printing; the old code routed teardown to the main frame, leaking cross-site print state under site isolation.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…