← WebKit — 2026-W41
d12fc1298fbd6b3dfb0d7135de15b4ca06350bb8 [LBSE] Fix hit testing of children inside transformed layered SVG groups
not a security fix
confidence 0.12
signal score 6.3
Source/WebCore/rendering
Classified as not security-relevant.
Triage note: Corrects SVG DOM-order hit testing to build a user-space HitTestLocation/rect (userSpaceShift = svgOffset - offsetFromAncestor) before testing transformed and non-transformed children. Hit-test coordinate-space correctness fix; any event-targeting security angle is speculative and no memory safety is involved.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Corrects SVG DOM-order hit testing to build a user-space HitTestLocation/rect (userSpaceShift = svgOffset - offsetFromAncestor) before testing transformed and non-transformed children. Hit-test coordinate-space correctness fix; any event-targeting security angle is speculative and no memory safety is involved.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), area:Source/WebCore/rendering (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page