← WebKit — 2026-W39
8d3c0a9c276d5a9d8f2942f435e88dda84a3f279 [Site Isolation] http/tests/dom/cross-origin-detached-window-properties.html fails
not a security fix
confidence 0.18
signal score 7.67
Source/WebCore/page
Classified as not security-relevant.
Triage note: RemoteDOMWindow caches m_detachedFrameDocumentSecurityOrigin/sandbox state on frameDetached() and exposes frameDocumentSecurityOriginOrOpaque()/frameDocumentIsSandboxedOrigin(); DOMWindow::crossDomainAccessErrorMessage uses these. Only affects the generated cross-origin error-message string under site isolation, not an access-control decision; correctness, not an exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: RemoteDOMWindow caches m_detachedFrameDocumentSecurityOrigin/sandbox state on frameDetached() and exposes frameDocumentSecurityOriginOrOpaque()/frameDocumentIsSandboxedOrigin(); DOMWindow::crossDomainAccessErrorMessage uses these. Only affects the generated cross-origin error-message string under site isolation, not an access-control decision; correctness, not an exploitable bug.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2)
Before / after
Loading diff…
On This Page