← WebKit — 2026-W39
d620932d8ce37cf83f60d5c50dace2d50fed4f80 [Image Redux] Size canvas image sources with the CSS object size negotiation
not a security fix
confidence 0.1
signal score 6.56
Source/WebCore/html
Classified as not security-relevant.
Triage note: Introduces ImageSizingContext/ObjectSizeNegotiation/VideoFrameImageSizing and moves WebCodecsVideoFrame's origin-clean/taint and usability checks into shared CanvasImageSource+OriginClean/+Usability helpers. The security (taint) checks are preserved, just factored out; refactor.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Introduces ImageSizingContext/ObjectSizeNegotiation/VideoFrameImageSizing and moves WebCodecsVideoFrame's origin-clean/taint and usability checks into shared CanvasImageSource+OriginClean/+Usability helpers. The security (taint) checks are preserved, just factored out; refactor.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+2.59), msg_noise (-2.5), area:Source/WebCore/html (+2.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page