Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 7afb5f1f0a0ac387e26ba4e7a558ffd94292cd5e
https://github.com/WebKit/WebKit/commit/7afb5f1f0a0ac387e26ba4e7a558ffd94292cd5e
Author: Zak Ridouh <[email protected]>
Date: 2026-09-28 (Mon, 28 Sep 2026)
Changed paths:
A
LayoutTests/http/tests/site-isolation/resources/navigate-self-on-message.html
A
LayoutTests/http/tests/site-isolation/resources/report-origin-to-parent.html
A
LayoutTests/http/tests/site-isolation/sandbox-attribute-change-applies-to-self-navigation-expected.txt
A
LayoutTests/http/tests/site-isolation/sandbox-attribute-change-applies-to-self-navigation.html
M Source/WebKit/UIProcess/WebPageProxy.cpp
M Source/WebKit/WebProcess/WebPage/WebFrame.cpp
M Source/WebKit/WebProcess/WebPage/WebFrame.h
M Source/WebKit/WebProcess/WebPage/WebFrame.messages.in
Log Message:
-----------
[Site Isolation] Sandbox attribute changes don't reach a cross-process
iframe's own process
https://bugs.webkit.org/show_bug.cgi?id=324904
rdar://188133096
Reviewed by Abrar Rahman Protyasha and Alex Christensen.
When a parent changed a cross-process iframe's sandbox attribute, only the UI
process learned the new flags. A navigation the iframe started itself stayed in
its process and committed its next document with the old flags.
Forward the flags from WebPageProxy::updateSandboxFlags to the process hosting
the frame, and to the process it is provisionally navigating to, which the
parent's process never updates either.
Test:
http/tests/site-isolation/sandbox-attribute-change-applies-to-self-navigation.html
*
LayoutTests/http/tests/site-isolation/resources/navigate-self-on-message.html:
Added.
* LayoutTests/http/tests/site-isolation/resources/report-origin-to-parent.html:
Added.
*
LayoutTests/http/tests/site-isolation/sandbox-attribute-change-applies-to-self-navigation-expected.txt:
Added.
*
LayoutTests/http/tests/site-isolation/sandbox-attribute-change-applies-to-self-navigation.html:
Added.
* Source/WebKit/UIProcess/WebPageProxy.cpp:
(WebKit::WebPageProxy::updateSandboxFlags):
* Source/WebKit/WebProcess/WebPage/WebFrame.cpp:
(WebKit::WebFrame::updateSandboxFlags):
* Source/WebKit/WebProcess/WebPage/WebFrame.h:
* Source/WebKit/WebProcess/WebPage/WebFrame.messages.in:
Canonical link: https://commits.webkit.org/322116@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
