Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: ed0fee7700f543f507e824bdede4da19b8414dc9
https://github.com/WebKit/WebKit/commit/ed0fee7700f543f507e824bdede4da19b8414dc9
Author: Marcos Caceres <[email protected]>
Date: 2026-07-15 (Wed, 15 Jul 2026)
Changed paths:
M LayoutTests/platform/ios/TestExpectations
M Source/WebKit/UIProcess/WebPageProxy.cpp
M Source/WebKit/UIProcess/WebPageProxyInternals.h
Log Message:
-----------
Digital Credentials: UI process should independently verify user activation
https://bugs.webkit.org/show_bug.cgi?id=312458
rdar://174908839
Reviewed by Pascoe.
A compromised WebContent process could bypass the transient activation check
in DigitalCredential::discoverFromExternalSource() and send the
ShowDigitalCredentialsChooser IPC directly, presenting a credential chooser
with no user gesture.
Have the UI process independently verify that a genuine user activation
occurred recently before presenting the chooser, by comparing its own
lastActivationTimestamp against the transient activation window.
lastActivationTimestamp is written only when the UI process processes real
input events, so it cannot be forged by the WebContent process.
Also consume that activation once the chooser is presented, by recording the
serviced activation timestamp and rejecting any later request that does not
carry a newer one, so a single user gesture cannot authorize more than one
chooser.
Canonical link: https://commits.webkit.org/317228@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
