← WebKit — 2026-W39
8de66dfab583dd94beceb39726595d4fa890b337 [Site Isolation] imported/w3c/web-platform-tests/html/browsers/browsing-the-web/history-traversal/pageswap/pageswap-replace-with-cross-origin-redirect.sub.html
not a security fix
confidence 0.12
signal score 8.4
Source/WebCore/loader
Classified as not security-relevant.
Triage note: Plumbs navigationHistoryBehavior on DocumentLoader/NavigationAction/LoadParameters/NavigationActionData so a process taking over a navigation (e.g. cross-site redirect under site isolation) resolves the same push/replace, instead of recomputing as Auto. Parameter threading with a history-semantics correctness fix; at most a minor history-entry issue, no memory-safety/security primitive.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Plumbs navigationHistoryBehavior on DocumentLoader/NavigationAction/LoadParameters/NavigationActionData so a process taking over a navigation (e.g. cross-site redirect under site isolation) resolves the same push/replace, instead of recomputing as Auto. Parameter threading with a history-semantics correctness fix; at most a minor history-entry issue, no memory-safety/security primitive.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), null_guard (+1.2), uaf_lifetime (+2.2), area:Source/WebCore/loader (+2.0)
Before / after
Loading diff…
On This Page