Branch: refs/heads/webkitglib/2.50
Home: https://github.com/WebKit/WebKit
Commit: f1c01b631d4d2cf17e1b0e64046d68c0e5aaa3af
https://github.com/WebKit/WebKit/commit/f1c01b631d4d2cf17e1b0e64046d68c0e5aaa3af
Author: Anne van Kesteren <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
A LayoutTests/fast/dom/Document/clone-node-document-types-expected.txt
A LayoutTests/fast/dom/Document/clone-node-document-types.html
M Source/WebCore/dom/Document.cpp
Log Message:
-----------
Cherry-pick 310106@main (641d4a902767).
https://bugs.webkit.org/show_bug.cgi?id=310902
Fix logic errors with cloning XML documents
https://bugs.webkit.org/show_bug.cgi?id=310902
Reviewed by David Kilzer.
isSVGDocument() is a subset of isXMLDocument() so was never reached.
And the second bug is that we had XML and XHTML swapped.
Canonical link: https://commits.webkit.org/310106@main
Canonical link: https://commits.webkit.org/298234.530@webkitglib/2.50
Commit: bc608e98aec5d1f7e26bcf7b7eac37ff885149fe
https://github.com/WebKit/WebKit/commit/bc608e98aec5d1f7e26bcf7b7eac37ff885149fe
Author: Ahmad Saleem <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
A
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes-expected.txt
A
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes.html
M Source/WebCore/svg/animation/SVGSMILElement.cpp
Log Message:
-----------
Cherry-pick 310184@main (10f5b40c292e).
https://bugs.webkit.org/show_bug.cgi?id=310971
[SVG] SMIL parseClockValue should reject out-of-range minutes and seconds
https://bugs.webkit.org/show_bug.cgi?id=310971
rdar://173577212
Reviewed by Nikolas Zimmermann.
parseClockValue parses hours and minutes as uint8_t (0-255) with no
range check, and seconds via toDouble with no upper bound. Per the SMIL
timing spec [1], Minutes and Seconds in Full-clock-value (HH:MM:SS) and
Partial-clock-value (MM:SS) forms must be in the range 00-59. Values
like "01:99:01" or "30:99" were incorrectly accepted.
Add range validation for both minutes and seconds in both clock value forms.
[1] https://www.w3.org/TR/SMIL/smil-timing.html#q22
* Source/WebCore/svg/animation/SVGSMILElement.cpp:
(WebCore::SVGSMILElement::parseClockValue):
*
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes-expected.txt:
Added.
*
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes.html:
Added.
Canonical link: https://commits.webkit.org/310184@main
Canonical link: https://commits.webkit.org/298234.531@webkitglib/2.50
Compare: https://github.com/WebKit/WebKit/compare/36c3a10cce3d...bc608e98aec5
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
