← WebKit — 2026-W36
86e957015e02 [WebAuthn] Perform validation of related origins
not a security fix
confidence 0.13
signal score 17.12
Source/WebCore/Headers.cmake
Classified as not security-relevant.
Triage note: Adds WellKnownOriginList, WellKnownResourceFetcher and RelatedOriginsValidator plus WebAuthn RP-ID related-origin validation and delegate plumbing. Security-relevant feature implementation (new files/API) rather than a fix to an existing identified bug, so NotSecurity per the feature-work rule.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds WellKnownOriginList, WellKnownResourceFetcher and RelatedOriginsValidator plus WebAuthn RP-ID related-origin validation and delegate plumbing. Security-relevant feature implementation (new files/API) rather than a fix to an existing identified bug, so NotSecurity per the feature-work rule.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), bounds_guard (+4.32), null_guard (+2.59), uaf_lifetime (+4.75), msg_soft (+1.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page