Phinehas Fuachie (unlinked)
WebCore contributor
Summary
Fuachie works almost entirely on media playback across WebCore and WebKit: fullscreen enter/exit state machines, Picture-in-Picture, media controls, and the experimental spatial/projected video renderer, with a persistent secondary thread of Site Isolation work where video and fullscreen have to survive a process boundary. The output is overwhelmingly feature and correctness work rather than security, but the lone memory-safety fix — a use-after-free in `MediaElementAudioSourceNode::provideInput` when the owning iframe is detached — lands exactly on the seam they otherwise spend most of their time on: media object lifetime versus frame teardown. Systematic-variant candidate: audio and video nodes, fullscreen controllers, and PiP state that hold references across cross-origin iframe removal and re-insertion. That same lifecycle shows up repeatedly here as correctness bugs (iframes stuck at `about:blank` after re-insertion, `iframe-reinsert-same-src-commits.html` timing out, spurious resize events on fullscreen entry), which makes it a plausible place for more lifetime confusion than the one already found.
Components
Security Fix History
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-09-16 -[WKFullScreenWindowController prefersSceneDimming] falls back to YES when there is no best video, which is every fullsc
- 2026-09-03 A page cannot opt out of the spatial video renderer (experimental)
- 2026-09-02 YouTube captions freeze on the previous video's text in fullscreen
- 2026-09-02 Rotating device to landscape exits full screen
- 2026-08-28 All subsequent videos played after the first one auto exit fullscreen back to inline
- 2026-08-23 Use-after-free in MediaElementAudioSourceNode::provideInput when iframe is detached ·
- 2026-08-21 [macOS][Site Isolation] Video Viewer is confined to the inline iframe rect instead of filling the web view
- 2026-08-18 Changing the projection attribute on a playing video does not update the spatial video renderer (experimental)
- 2026-08-17 [iOS][Site Isolation] No Picture-in-Picture button in fullscreen for video in a cross-origin iframe
- 2026-08-17 [ macOS wk2 arm64 ] http/tests/site-isolation/fullscreen.html is a flaky failure
- 2026-08-12 The projection attribute of the spatial video renderer is x-webkit-spatial instead of x-webkit-projection (experimental)
- 2026-08-11 [Site Isolation] http/tests/site-isolation/fullscreen-escape-key.html is a flaky failure
- 2026-08-07 [Site Isolation] http/tests/site-isolation/iframe-reinsert-same-src-commits.html times out
- 2026-08-06 Spatial/projected video rendering in macOS and iOS media controls (experimental)
- 2026-07-31 [Site Isolation] Cross-origin iframe stuck at about:blank after removal and re-insertion