← WebKit — 2026-W36
ef1d7119a4db AX: live and isolated tree don't agree on several attributes when a textarea ends in a line break
not a security fix
confidence 0.15
signal score 10.6
Source/WebCore/accessibility
Classified as not security-relevant.
Triage note: Adds AXTextMarkerRange::length() (via a shared forEachTextPiece walk) computed without building the string, and isCollapsedTrailingLineBreak handling so the placeholder <br> ending a text control's value is not counted/stepped over. This is an accessibility correctness/refactor fix for character and line counts, AX-thread only, with no clear exploitable memory-safety primitive.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds AXTextMarkerRange::length() (via a shared forEachTextPiece walk) computed without building the string, and isCollapsedTrailingLineBreak handling so the placeholder <br> ending a text control's value is not counted/stepped over. This is an accessibility correctness/refactor fix for character and line counts, AX-thread only, with no clear exploitable memory-safety primitive.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), bounds_guard (+2.0), null_guard (+1.2), clamp_saturate (+2.92), large_churn (-2.0)
Before / after
Loading diff…
On This Page