← WebKit — 2026-W39
f83ad9a455998aacca975429e2c7dd1a1a5ea215 Record Local Network Access permission decisions and report them from navigator.permissions
not a security fix
confidence 0.15
signal score 7.67
Source/WebCore/html
Classified as not security-relevant.
Triage note: Adds LocalNetwork/LoopbackNetwork PermissionName and PermissionsPolicy::Feature, QueryLocalNetworkAccessPermission IPC, per-session permission storage and testing setters, and replaces the hardcoded (true,true) permissions-policy args in checkLocalNetworkAccess with real plumbed values. Primarily rollout of the LNA feature; the enforcement change is part of implementing the feature, not a silent fix of an exploitable regression.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Adds LocalNetwork/LoopbackNetwork PermissionName and PermissionsPolicy::Feature, QueryLocalNetworkAccessPermission IPC, per-session permission storage and testing setters, and replaces the hardcoded (true,true) permissions-policy args in checkLocalNetworkAccess with real plumbed values. Primarily rollout of the LNA feature; the enforcement change is part of implementing the feature, not a silent fix of an exploitable regression.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+1.2), area:Source/WebCore/html (+2.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page