← WebKit — 2026-W37
2aedf51ba631caa8a95ba38f188f1ccf8a750b41 Make WTF::UUID's empty value unnameable outside HashTraits and MarkableTraits
not a security fix
confidence 0.15
signal score 7.87
Source/WebCore/dom
Classified as not security-relevant.
Triage note: Makes WTF::UUID emptyValue/deletedValue private, adds a RELEASE_ASSERT forbidding construction with the reserved sentinels, and migrates 'no UUID' call sites to Markable<UUID>/std::nullopt (DocumentMarker, WritingTools, TextAnimation). Hardening/refactor of sentinel handling; no concrete attacker-reachable bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Makes WTF::UUID emptyValue/deletedValue private, adds a RELEASE_ASSERT forbidding construction with the reserved sentinels, and migrates 'no UUID' call sites to Markable<UUID>/std::nullopt (DocumentMarker, WritingTools, TextAnimation). Hardening/refactor of sentinel handling; no concrete attacker-reachable bug fixed.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: security_assert (+4.87), msg_soft (+1.0), area:Source/WebCore/dom (+2.0)
Before / after
Loading diff…
On This Page