← WebKit — 2026-W35
8ce95bb31076b2a39f7450cb0018f30da1294a58 Use shared URLPattern matching for ServiceWorker routes
not a security fix
confidence 0.15
signal score 13.94
Source/WebCore/Headers.cmake
Classified as not security-relevant.
Triage note: Adds URLPatternPartListMatcher/createWithoutRegExpSupport/testWithoutRegExp so the network process can match URL patterns without running YARR on untrusted input, plus encodedUser/encodedPassword use and a now-checked consumeRequiredToken(Close). Primarily a new feature; embedded fixes are minor correctness, no identified exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds URLPatternPartListMatcher/createWithoutRegExpSupport/testWithoutRegExp so the network process can match URL patterns without running YARR on untrusted input, plus encodedUser/encodedPassword use and a now-checked consumeRequiredToken(Close). Primarily a new feature; embedded fixes are minor correctness, no identified exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), security_assert (+4.87), bounds_guard (+2.0), null_guard (+2.59), large_churn (-2.0)
Before / after
Loading diff…
On This Page