Branch: refs/heads/webkitglib/2.52
Home: https://github.com/WebKit/WebKit
Commit: d12e65731a1dc88f2f807c150d672edc6eb9c73e
https://github.com/WebKit/WebKit/commit/d12e65731a1dc88f2f807c150d672edc6eb9c73e
Author: Anne van Kesteren <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element-origin-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element-origin-xhtml-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element-xhtml_exclude=(file_javascript_mailto)-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element_exclude=(file_javascript_mailto)-expected.txt
M LayoutTests/imported/w3c/web-platform-tests/url/resources/urltestdata.json
M
LayoutTests/imported/w3c/web-platform-tests/url/url-constructor.any.worker_exclude=(file_javascript_mailto)-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/url-constructor.any_exclude=(file_javascript_mailto)-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/url-origin.any-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/url-origin.any.worker-expected.txt
M Source/WTF/wtf/URLParser.cpp
M Tools/TestWebKitAPI/Tests/WTF/URLParser.cpp
Log Message:
-----------
Cherry-pick 310300@main (d5b4478380e7).
https://bugs.webkit.org/show_bug.cgi?id=310984
URL: fix bug in SpecialRelativeOrAuthority state
https://bugs.webkit.org/show_bug.cgi?id=310984
Reviewed by Youenn Fablet.
Reaching end-of-input in this state should not terminate the parser. We
should continue in the RelativeSlash state.
See
https://url.spec.whatwg.org/#special-relative-or-authority-state
for context.
Upstream:
https://github.com/web-platform-tests/wpt/pull/58839
Canonical link: https://commits.webkit.org/310300@main
Canonical link: https://commits.webkit.org/305877.399@webkitglib/2.52
Commit: 3651849dd748089571a450b6c25b60294d61d650
https://github.com/WebKit/WebKit/commit/3651849dd748089571a450b6c25b60294d61d650
Author: Tetsuharu Ohzeki <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
M JSTests/test262/expectations.yaml
M Source/JavaScriptCore/builtins/ArrayIteratorPrototype.js
Log Message:
-----------
Cherry-pick 310292@main (6117e70109ac).
https://bugs.webkit.org/show_bug.cgi?id=310802
[JSC] Fix test262 failure:
test/staging/sm/TypedArray/iterator-next-with-detached.js
https://bugs.webkit.org/show_bug.cgi?id=310802
Reviewed by Sosuke Suzuki.
If source is detached TypedArray and the iterator has been completed,
`%ArrayIteratorPrototype%.next()` should return `{ done: true }`
rather than throwing `TypeError` with describes the source TypedArray is
detached.
This complies _step 5_ of _23.1.5.2.1 %ArrayIteratorPrototype%.next()_ in
the spec.
https://tc39.es/ecma262/#sec-%arrayiteratorprototype%.next
* JSTests/test262/expectations.yaml:
* Source/JavaScriptCore/builtins/ArrayIteratorPrototype.js:
Canonical link: https://commits.webkit.org/310292@main
Canonical link: https://commits.webkit.org/305877.400@webkitglib/2.52
Commit: 26b275e95849ef8f7bf02cbd0807e084c35091bb
https://github.com/WebKit/WebKit/commit/26b275e95849ef8f7bf02cbd0807e084c35091bb
Author: Anne van Kesteren <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element-xhtml_exclude=(file_javascript_mailto)-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/a-element_exclude=(file_javascript_mailto)-expected.txt
M LayoutTests/imported/w3c/web-platform-tests/url/resources/urltestdata.json
M
LayoutTests/imported/w3c/web-platform-tests/url/url-constructor.any.worker_exclude=(file_javascript_mailto)-expected.txt
M
LayoutTests/imported/w3c/web-platform-tests/url/url-constructor.any_exclude=(file_javascript_mailto)-expected.txt
M Source/WTF/wtf/URLParser.cpp
Log Message:
-----------
Cherry-pick 310290@main (b217ae6e96cf).
https://bugs.webkit.org/show_bug.cgi?id=310986
URL: handle backslash correctly for non-special URLs
https://bugs.webkit.org/show_bug.cgi?id=310986
Reviewed by Youenn Fablet.
To make this work correctly we have to ensure that m_urlIsSpecial is
initialized early enough.
Upstream:
https://github.com/web-platform-tests/wpt/pull/58840
Canonical link: https://commits.webkit.org/310290@main
Canonical link: https://commits.webkit.org/305877.401@webkitglib/2.52
Commit: bf60c08b4b901c779e4889ce64f6744574bf84b4
https://github.com/WebKit/WebKit/commit/bf60c08b4b901c779e4889ce64f6744574bf84b4
Author: Anne van Kesteren <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
A LayoutTests/fast/dom/Document/clone-node-document-types-expected.txt
A LayoutTests/fast/dom/Document/clone-node-document-types.html
M Source/WebCore/dom/Document.cpp
Log Message:
-----------
Cherry-pick 310106@main (641d4a902767).
https://bugs.webkit.org/show_bug.cgi?id=310902
Fix logic errors with cloning XML documents
https://bugs.webkit.org/show_bug.cgi?id=310902
Reviewed by David Kilzer.
isSVGDocument() is a subset of isXMLDocument() so was never reached.
And the second bug is that we had XML and XHTML swapped.
Canonical link: https://commits.webkit.org/310106@main
Canonical link: https://commits.webkit.org/305877.402@webkitglib/2.52
Commit: b351a31e0521438aef627acfb7bc57977bdca3cb
https://github.com/WebKit/WebKit/commit/b351a31e0521438aef627acfb7bc57977bdca3cb
Author: Ahmad Saleem <[email protected]>
Date: 2026-04-09 (Thu, 09 Apr 2026)
Changed paths:
A
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes-expected.txt
A
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes.html
M Source/WebCore/svg/animation/SVGSMILElement.cpp
Log Message:
-----------
Cherry-pick 310184@main (10f5b40c292e).
https://bugs.webkit.org/show_bug.cgi?id=310971
[SVG] SMIL parseClockValue should reject out-of-range minutes and seconds
https://bugs.webkit.org/show_bug.cgi?id=310971
rdar://173577212
Reviewed by Nikolas Zimmermann.
parseClockValue parses hours and minutes as uint8_t (0-255) with no
range check, and seconds via toDouble with no upper bound. Per the SMIL
timing spec [1], Minutes and Seconds in Full-clock-value (HH:MM:SS) and
Partial-clock-value (MM:SS) forms must be in the range 00-59. Values
like "01:99:01" or "30:99" were incorrectly accepted.
Add range validation for both minutes and seconds in both clock value forms.
[1] https://www.w3.org/TR/SMIL/smil-timing.html#q22
* Source/WebCore/svg/animation/SVGSMILElement.cpp:
(WebCore::SVGSMILElement::parseClockValue):
*
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes-expected.txt:
Added.
*
LayoutTests/imported/w3c/web-platform-tests/svg/animations/smil-clock-value-out-of-range-minutes.html:
Added.
Canonical link: https://commits.webkit.org/310184@main
Canonical link: https://commits.webkit.org/305877.403@webkitglib/2.52
Compare: https://github.com/WebKit/WebKit/compare/1e5332e094d4...b351a31e0521
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
