← WebKit — 2026-W41

74af04025b3b5da310c71d9780d3ac28eceafa9c  SVG elements inside hidden containers should not be focusable

not a security fix confidence 0.18 signal score 6.3 Source/WebCore/dom
Classified as not security-relevant.
Triage note: Element::isFocusable() walks the renderer ancestry and returns false when an ancestor isRenderSVGHiddenContainer()/isLegacyRenderSVGHiddenContainer() (e.g. inside <defs>, <clipPath>, <symbol>). This is an SVG-spec focusability correctness fix with no evident memory-safety primitive.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), area:Source/WebCore/dom (+2.0), surgical (+1.3)

Before / after

Loading diff…
On This Page