Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 55def1256bcb2ed2cf462d8cb5b4784ce16de526
https://github.com/WebKit/WebKit/commit/55def1256bcb2ed2cf462d8cb5b4784ce16de526
Author: Anthony Tarbinian <[email protected]>
Date: 2026-10-12 (Mon, 12 Oct 2026)
Changed paths:
M Source/WebCore/Headers.cmake
A Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinator.cpp
A Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinator.h
A
Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinatorClient.h
M Source/WebCore/Modules/proofofpossession/ProofOfPossessionCredential.cpp
M Source/WebCore/Modules/proofofpossession/ProofOfPossessionCredential.h
M Source/WebCore/Modules/webauthn/AuthenticatorCoordinator.cpp
M Source/WebCore/Sources.txt
M Source/WebCore/WebCore.xcodeproj/project.pbxproj
M Source/WebCore/dom/Document.cpp
M Source/WebCore/dom/Document.h
M Source/WebCore/page/Page.cpp
M Source/WebCore/page/Page.h
M Source/WebCore/page/PageConfiguration.cpp
M Source/WebCore/page/PageConfiguration.h
Log Message:
-----------
Add ProofOfPossessionCoordinator
https://bugs.webkit.org/show_bug.cgi?id=326845
rdar://189542235
Reviewed by Pascoe.
Define ProofOfPossessionCoordinator which handles incoming requests,
validation, security checks, aborting requests and more.
The validator require the origin of the requesting frame to be the same
as all of its ancestors. Multiple requests at the same time are also not
allowed. For mediation, user consent is required. Documents are also required
to be focused and visible.
The coordinator also routes a pre-flight check called isAvailable to the
ProofOfPossessionCoordinatorClient.
AuthenticatorCoordinator also used the same same-origin-with-ancestors check,
so I lifted a shared version into Document::isSameOriginWithAncestors().
Its behavior is unchanged.
* Source/WebCore/Headers.cmake:
* Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinator.cpp:
Added.
* Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinator.h:
Added.
*
Source/WebCore/Modules/proofofpossession/ProofOfPossessionCoordinatorClient.h:
Added.
* Source/WebCore/Modules/proofofpossession/ProofOfPossessionCredential.cpp:
* Source/WebCore/Modules/proofofpossession/ProofOfPossessionCredential.h:
* Source/WebCore/Modules/webauthn/AuthenticatorCoordinator.cpp:
* Source/WebCore/Sources.txt:
* Source/WebCore/WebCore.xcodeproj/project.pbxproj:
* Source/WebCore/dom/Document.cpp:
* Source/WebCore/dom/Document.h:
* Source/WebCore/page/Page.cpp:
* Source/WebCore/page/Page.h:
* Source/WebCore/page/PageConfiguration.cpp:
* Source/WebCore/page/PageConfiguration.h:
Canonical link: https://commits.webkit.org/323465@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
