← WebKit — 2026-W41
a91e441ffeffc1ee6ac3bcbb64cda28e489f10f0 AX: base appearance list boxes do not post AXSelectedChildrenChanged
not a security fix
confidence 0.15
signal score 9.77
Source/WebCore/rendering
Classified as not security-relevant.
Triage note: Accessibility refactor: deferSelectedChildrenChangedIfNeeded becomes deferSelectedChildrenChanged that always defers to the cache-update timer, and the notification moves from RenderListBox::selectionChanged into AXObjectCache::onSelectedOptionChanged. Removes a synchronous selectedChildrenChanged during layout (reentrancy hygiene) but no concrete attacker-reachable bug is demonstrated.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Accessibility refactor: deferSelectedChildrenChangedIfNeeded becomes deferSelectedChildrenChanged that always defers to the cache-update timer, and the notification moves from RenderListBox::selectionChanged into AXObjectCache::onSelectedOptionChanged. Removes a synchronous selectedChildrenChanged during layout (reentrancy hygiene) but no concrete attacker-reachable bug is demonstrated.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), area:Source/WebCore/rendering (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page