Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 6f080b99cb9bc24d70ce427426221eff0eefe9e2
https://github.com/WebKit/WebKit/commit/6f080b99cb9bc24d70ce427426221eff0eefe9e2
Author: Marcos Caceres <[email protected]>
Date: 2026-07-28 (Tue, 28 Jul 2026)
Changed paths:
M
LayoutTests/imported/w3c/web-platform-tests/digital-credentials/user-activation-get.https-expected.txt
M Source/WebCore/Modules/identity/DigitalCredential.cpp
Log Message:
-----------
Digital Credentials get() should consume transient activation before
serializing requests
https://bugs.webkit.org/show_bug.cgi?id=319583
rdar://problem/182412996
Reviewed by Abrar Rahman Protyasha.
get() serialized the requested credentials, which can reject with a TypeError,
before consuming the document's transient activation. A page could therefore
probe whether its request data was serializable without spending its user
activation. Filter the requests down to those with a supported protocol first,
reject with a TypeError if none remain, then consume transient activation, and
only then serialize the surviving requests.
Aligns with the Digital Credentials specification change in
https://github.com/w3c-fedid/digital-credentials/pull/558.
*
LayoutTests/imported/w3c/web-platform-tests/digital-credentials/user-activation-get.https-expected.txt:
*
LayoutTests/platform/ios/imported/w3c/web-platform-tests/digital-credentials/get.https-expected.txt:
* Source/WebCore/Modules/identity/DigitalCredential.cpp:
(WebCore::DigitalCredential::discoverFromExternalSource):
Canonical link: https://commits.webkit.org/318122@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
