AnujPanta1
WebInspector contributor
Summary
Works almost entirely in Web Inspector, with a sustained focus on making the inspector protocol function under Site Isolation — per-frame FrameDOMAgent and FrameDOMStorageAgent, a UIProcess-side Storage domain for cookie inspection, and cross-origin iframe support across the DOM tree, Event Listeners, Accessibility, and Sources panels. Nothing here is classified as a security fix or hardening; the pattern is feature plumbing that deliberately moves DOM, storage, and cookie access across the very process boundaries Site Isolation exists to enforce. The audit angle: the per-frame agents and the new UIProcess Storage domain are fresh cross-process surface, and the commands that reach across origins — resolveNode/requestNode, Page.getResourceContent, the DOM editing and undo-stack coordination paths — are where an isolation check is easiest to omit.
Components
Security Fix History
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-09-16 Web Inspector: DOMDebugger breakpoints never fire under site isolation
- 2026-09-14 Web Inspector: pause-on-assert.html races the steps it does not expect to pause on
- 2026-09-11 Web Inspector: more inspector/debugger tests use the inert page-target
- 2026-09-10 Web Inspector: Debugger.globalObjectCleared from a subframe wipes every target's script map
- 2026-08-11 Web Inspector: [Site Isolation] Show Paint Rects does not draw in cross-origin iframes
- 2026-07-22 [Web Inspector] [Site Isolation] Deliver DOM custom-element and pseudo-element events to Frame Targets
- 2026-07-22 Web Inspector: [SI] coordinate Cmd+Z across per-frame undo stacks
- 2026-07-22 Web Inspector: [SI] route shadowRootPushed/Popped to per-frame FrameDOMAgent
- 2026-07-22 Web Inspector: [SI] implement Page.getResourceContent under Site Isolation
- 2026-07-14 Web Inspector: [SI] wire the frontend cookie UI onto the UIProcess Storage domain https://bugs.webkit.org/show_bug.cgi?i
- 2026-07-14 WIP: [SI] Add a Storage domain for cookie inspection
- 2026-07-06 Web Inspector: [SI] AutoFill / user-script sources missing in Sources tab
- 2026-07-04 Web Inspector: [SI] implement DOMStorage storage commands on FrameDOMStorageAgent
- 2026-07-03 Web Inspector: [SI] add per-frame FrameDOMStorageAgent (enable/disable)
- 2026-07-03 Web Inspector: FrameDOMAgent inline style invalidation issues one DOM.getAttributes command per node instead of batching