← WebKit — 2026-W35
86e957015e02f6e737e1f7c6d5217499ff36ab2f [WebAuthn] Perform validation of related origins
not a security fix
confidence 0.13
signal score 17.12
Source/WebCore/Headers.cmake
Classified as not security-relevant.
Triage note: Adds new files WellKnownOriginList, RelatedOriginsValidator and WellKnownResourceFetcher plus UIDelegate wiring to validate related origins against a well-known list. Security-relevant domain but new feature code, not a fix to existing code.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds new files WellKnownOriginList, RelatedOriginsValidator and WellKnownResourceFetcher plus UIDelegate wiring to validate related origins against a well-known list. Security-relevant domain but new feature code, not a fix to existing code.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), bounds_guard (+4.32), null_guard (+2.59), uaf_lifetime (+4.75), msg_soft (+1.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page