J0pan
WebCore contributor
Summary
J0pan works primarily in WebCore, split between implementing the CSS Values 5 `random-item()` function — parse-time argument grammar, `<random-key>` parsing shared with `random()`, computed-value resolution, and disallowing it inside `@container style()` queries — and site-specific compatibility fixes. The compatibility work clusters heavily on media-control interaction: volume slider dragging and hit-testing across Netflix, TikTok, Facebook, and Yahoo Sports, native PiP on Hulu, and slider gaze-glow regions on VisionOS/iPad, with a smaller tail in drag-and-drop `dataTransfer` semantics and download filename handling. This is feature and web-compat work rather than security work, but the `random-item()` grammar parsing is newly landed and untested against adversarial input — a reasonable place to fuzz CSS value parsing.
Components
Security Fix History
- No security fixes recorded
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-08-04 [css-values-5 random-item()] random-item() should be disallowed in @container style() queries
- 2026-07-15 [css-values-5 random-item()] Share <random-key> parsing between random() and random-item()
- 2026-07-13 [css-values-5 random-item()] Factor random-item() argument-grammar substitution into a helper following the attr() patt
- 2026-07-13 Pasting Confluence content is rendered incorrectly if in Dark Mode
- 2026-07-06 [css-values-5 random-item()] computed-value resolution (parse <random-key>, select item)
- 2026-06-26 [css-values-5 random-item()] parse-time support for the argument grammar
- 2026-06-11 tumblr.com: Saving .gifv image adds .html to end of filename
- 2026-06-05 netflix.com: v2: Webpage scrolls when adjusting volume slider (VisionOS / iPad) -- narrower fix after revert of 314097@m
- 2026-06-03 calendar.google.com: Safari: Print job fails to start when attempting to print Google Calendar
- 2026-05-29 Safari "open safe files" turns .tgz files into tarballs without a file extension (should be .tar; works for .tar.gz)
- 2026-05-22 claude.com: Selection highlight in the search field moves up as you scroll the page on iPhone
- 2026-05-06 dataTransfer.types includes "Files" but dataTransfer.files is empty when dragging images from Mail.app
- 2026-04-30 spotify.com: Spotify Search Failure
- 2026-04-29 REGRESSION (310265@main): Gaze glow region for slider thumb is too large
- 2026-04-27 sports.yahoo.com: volume slider baseline is incorrect and it is bit below compared to macOS