Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 3f52ce59f2097979869db35f45016a16a9713580
https://github.com/WebKit/WebKit/commit/3f52ce59f2097979869db35f45016a16a9713580
Author: Timothy Hatcher <[email protected]>
Date: 2026-04-29 (Wed, 29 Apr 2026)
Changed paths:
M Source/WebCore/dom/Element.h
M Source/WebCore/editing/markup.h
M Source/WebCore/html/HTMLImageElement.h
M Source/WebCore/loader/archive/cf/LegacyWebArchive.cpp
M Source/WebCore/page/PageSerializer.cpp
M Tools/TestWebKitAPI/Tests/WebKit/WKWebView/WKWebViewConfiguration.mm
Log Message:
-----------
safari-web-extension url masking bypass.
https://webkit.org/b/304155
rdar://problem/166499973
Reviewed by Chris Dumez.
Audited remaining ResolveURLs::No and ResolveURLs::Yes uses, and changed to
ExcludingURLsForPrivacy
versions to catch places where extension URLs could be returned unmasked
including XMLSerializer.
Test: Tools/TestWebKitAPI/Tests/WebKitCocoa/WKWebViewConfiguration.mm
* Source/WebCore/dom/Element.h:
* Source/WebCore/editing/markup.h:
(WebCore::serializeFragment):
* Source/WebCore/html/HTMLImageElement.h:
* Source/WebCore/loader/archive/cf/LegacyWebArchive.cpp:
(WebCore::LegacyWebArchive::createInternal):
(WebCore::LegacyWebArchive::createFromSelection):
* Source/WebCore/page/PageSerializer.cpp:
(WebCore::PageSerializer::SerializerMarkupAccumulator::SerializerMarkupAccumulator):
* Source/WebCore/xml/XMLSerializer.cpp:
(WebCore::XMLSerializer::serializeToString):
* Tools/TestWebKitAPI/Tests/WebKitCocoa/WKWebViewConfiguration.mm:
(TEST(WebKit, ConfigurationMaskedURLSchemes)): Added XMLSerializer tests.
Originally-landed-as: 305413.31@safari-7624-branch (31eb1554d216).
rdar://173974754
Canonical link: https://commits.webkit.org/312301@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
