Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 7fcf73d2aff00cac98545c4c11e11c8944bc64af
https://github.com/WebKit/WebKit/commit/7fcf73d2aff00cac98545c4c11e11c8944bc64af
Author: Anthony Tarbinian <[email protected]>
Date: 2025-12-16 (Tue, 16 Dec 2025)
Changed paths:
A
LayoutTests/http/tests/site-isolation/resources/post-opener-info-message-to-opener.html
A
LayoutTests/http/tests/site-isolation/window-open-from-about-blank-iframe-expected.txt
A
LayoutTests/http/tests/site-isolation/window-open-from-about-blank-iframe.html
M Source/WebKit/UIProcess/API/APIPageConfiguration.h
M Source/WebKit/UIProcess/WebPageProxy.cpp
M Source/WebKit/UIProcess/WebPageProxyInternals.h
Log Message:
-----------
[Site Isolation] Fix when about:blank iframes call window.open()
https://bugs.webkit.org/show_bug.cgi?id=303956
rdar://165169147
Reviewed by Alex Christensen.
This patch fixes an issue where calling window.open() from the context
of an about:blank iframe. Previously, this snippet would crash with site
isolation enabled.
```
i = document.body.appendChild(document.createElement("iframe"));
i.contentWindow.open();
```
This patch fixes
LayoutTests/http/tests/security/xss-DENIED-synchronous-frame-load-in-javascript-url.html
with site isolation enabled.
This patch changes the site passed into
BrowsingContextGroup::ensureProcessForSite
to use the same process as the opener when an about:blank page is opened with
window.open().
Test: http/tests/site-isolation/window-open-from-about-blank-iframe.html
*
LayoutTests/http/tests/site-isolation/resources/post-opener-info-message-to-opener.html:
Added.
*
LayoutTests/http/tests/site-isolation/window-open-from-about-blank-iframe-expected.txt:
Added.
*
LayoutTests/http/tests/site-isolation/window-open-from-about-blank-iframe.html:
Added.
* Source/WebKit/UIProcess/API/APIPageConfiguration.h:
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::Internals::Internals):
(WebKit::openerOrigin):
(WebKit::WebPageProxy::WebPageProxy):
(WebKit::WebPageProxy::initializeWebPage):
(WebKit::WebPageProxy::createNewPage):
(WebKit::activityStateChangeTimer): Deleted.
* Source/WebKit/UIProcess/WebPageProxyInternals.h:
Canonical link: https://commits.webkit.org/304540@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
