← WebKit — 2026-W36
bd7861b451f226a255358c8310321eae3e6c88f8 [Site Isolation] Change coordinate space for cross-process frame geometry
not a security fix
confidence 0.2
signal score 6.42
Source/WebCore/page
Classified as not security-relevant.
Triage note: Page::syncLocalFrameInfoToRemote now maps the on-screen/exposed rects into the child frame's view coordinates via mapAbsoluteToChildFrameViewRect and drops windowClipRectInParent from RemoteFrameLayoutInfo. Primarily rendering/tile-coverage correctness for site-isolated iframes; any cross-origin geometry exposure reduction is incidental and unproven.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Page::syncLocalFrameInfoToRemote now maps the on-screen/exposed rects into the child frame's view coordinates via mapAbsoluteToChildFrameViewRect and drops windowClipRectInParent from RemoteFrameLayoutInfo. Primarily rendering/tile-coverage correctness for site-isolated iframes; any cross-origin geometry exposure reduction is incidental and unproven.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.95), large_churn (-2.0)
Before / after
Loading diff…
On This Page