Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: fb75caed1b659f4869879706eac63a50dc0225b4
https://github.com/WebKit/WebKit/commit/fb75caed1b659f4869879706eac63a50dc0225b4
Author: Chris Dumez <[email protected]>
Date: 2026-05-29 (Fri, 29 May 2026)
Changed paths:
M Source/WebCore/platform/network/cocoa/NetworkStorageSessionCocoa.mm
M Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
Log Message:
-----------
setRawCookie: cookie.domain unvalidated + commentURL crashes NetworkProcess
https://bugs.webkit.org/show_bug.cgi?id=310069
rdar://172508832
Reviewed by Rupin Mittal.
Add message checks in setRawCookie() to validate the Cookie being received.
Also expand the scope of BLOCK_OBJC_EXCEPTIONS in
NetworkStorageSession::setCookies()
to cover the call to createNSHTTPCookie().
* Source/WebCore/platform/network/cocoa/NetworkStorageSessionCocoa.mm:
(WebCore::NetworkStorageSession::setCookies):
* Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp:
(WebKit::NetworkConnectionToWebProcess::setRawCookie):
Originally-landed-as: 305413.517@rapid/safari-7624.2.5.110-branch
(2f6654232966). rdar://176062378
Canonical link: https://commits.webkit.org/314177@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
