Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 5aadb31ea06464b0272464e7db5d17754387d832
      
https://github.com/WebKit/WebKit/commit/5aadb31ea06464b0272464e7db5d17754387d832
  Author: Jessica Cheung <[email protected]>
  Date:   2026-05-14 (Thu, 14 May 2026)

  Changed paths:
    M Source/WebKit/UIProcess/WebPageProxy.cpp
    M Tools/TestWebKitAPI/Tests/WebKit/WKWebView/SiteIsolation.mm

  Log Message:
  -----------
  UIProcess Stack-Use-After-Scope in WebPageProxy::propagateDragAndDrop
https://bugs.webkit.org/show_bug.cgi?id=314737
rdar://176191124

Reviewed by Aditya Keerthi.

forwardingData should be moved instead of captured by reference
because it is possible for forwardingData to be destroyed when
grantAccessToCurrentPasteboardData's async completion handler fires.

Add an API test that makes sure dropping a file in a cross origin
subframe does not crash. This test will crash without this fix.

* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::propagateDragAndDrop):
* Tools/TestWebKitAPI/Tests/WebKit/WKWebView/SiteIsolation.mm:
(TestWebKitAPI::(SiteIsolation, DropExternalFileInCrossOriginSubframe)):

Canonical link: https://commits.webkit.org/313254@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to