← WebKit Silent-Fix Report — 2026-W34
c73014505affe2bd1a831719b86068cc07dcde4a REGRESSION(318650@main): process swap on navigation response can reuse a process that already hosts the navigating page
severity medium
class LogicError
confidence 0.55
process swap / suspended pages
Primitive: Process swap on navigation response could reuse a process already hosting a suspended page
Triage note: Adds removeSuspendedPagesBeforeNavigation on the response-driven process-swap path so a swapped-to process is not left hosting another WebPage for the same proxy; regression fix tightening process/page association during navigation.
Triage note: Adds removeSuspendedPagesBeforeNavigation on the response-driven process-swap path so a swapped-to process is not left hosting another WebPage for the same proxy; regression fix tightening process/page association during navigation.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…