← WebKit — 2026-W39
2b7598eddbf2479eb82c22b4efe1862a0a26c7f5 [Navigation API] preventDefault() must cancel a cross-site process-swapping navigation under Site Isolation
not a security fix
confidence 0.2
signal score 13.81
Source/WebCore/loader
Classified as not security-relevant.
Triage note: Adds a PendingNavigateEventIdentifier threaded via NavigationActionData/IPC so DispatchPendingNavigateEventForProcessSwap can run the right pending navigate-event and let it cancel the swap, with identifier matching in takePendingDispatchNavigateEvent. Navigation-API/site-isolation feature plumbing, not a memory-safety fix.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds a PendingNavigateEventIdentifier threaded via NavigationActionData/IPC so DispatchPendingNavigateEventForProcessSwap can run the right pending navigate-event and let it cancel the swap, with identifier matching in takePendingDispatchNavigateEvent. Navigation-API/site-isolation feature plumbing, not a memory-safety fix.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+2.59), uaf_lifetime (+4.75), area:Source/WebCore/loader (+2.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page