aestes
WebCore contributor
Summary
aestes works almost entirely on media playback plumbing in WebCore and Platform — iOS/macOS wireless playback and AirPlay routing (including the upstream adoption of AVSystemRouting), media element state changes under user gesture, and the media stack's adaptation to Site Isolation. The pattern is platform integration rather than security work: SPI adoption, staging-code removal, and regression fixes against AVFoundation-backed routing, with the closest thing to a lifetime fix being MediaSource failing to unregister itself as a Logger observer on destruction. Where to look next: the cross-process media surfaces churned by the Site Isolation commits — AirPlay target pickers and media controls context menus in cross-origin frames — where routing and presentation state now crosses a process boundary it previously did not.
Components
Security Fix History
Hardening Commits
Recent Commits
- 2026-09-11 [visionOS] Stop importing LinearMediaKit in libWebKitSwift
- 2026-09-10 Mutating a media element's volume or muted properties under a user gesture should remove all behavior restrictions
- 2026-09-10 [iOS] Remove staging code for -[AVPlayer setDisconnectedFromSystemAudio:completionHandler:]
- 2026-09-09 [iOS] Wireless playback causes a RemoteMediaSessionHelperProxy to be created too eagerly
- 2026-09-02 [macOS] AirPlay target pickers are non-functional in Site Isolated frames
- 2026-09-01 [iOS] Media controls context menus can appear at the wrong position with Site Isolation enabled
- 2026-08-31 [iOS] When a MediaDeviceRoute is active and video is in fullscreen, an AirPlay placard is incorrectly displayed
- 2026-08-27 MediaSource should remove itself as a Logger observer on destruction
- 2026-08-24 REGRESSION (319455@main): media/wireless-playback-media-player/route-deactivate-pauses-playback.html fails
- 2026-08-24 [iOS] MediaPlayerPrivateWirelessPlayback does not correctly issue fast seeks
- 2026-08-21 [iOS] Current time stops updating on youtube.com after switching playback to an AVSystemRoute
- 2026-08-20 [iOS] Upstream adoption of AVSystemRouting
- 2026-08-17 Take 2: [iOS] WKAVContentSource should conform to AVPlaybackUserInterfaceVideoControllable
- 2026-07-30 [Site Isolation] Embedded YouTube videos on yahoo.com fail to render
- 2026-07-25 [Site Isolation] Expand test coverage for per-site camera, microphone, and autoplay policies in cross-origin frames