alanbaradlay
WebCore security specialist
Summary
alanbaradlay works almost exclusively in WebCore's layout and rendering code, with recent activity concentrated on consolidating the render tree's box-model hierarchy — relocating geometry, repaint-rect, and coordinate-mapping methods off RenderInline and up to RenderBoxModelObject/RenderBox — alongside CSS intrinsic-sizing fixes for min-content and max-content contributions. Security-classified work here is sparse and unrelated to memory-safety hardening; the sole flagged fix is a float inside an inline box being positioned twice after the line it was collected with is discarded, i.e. a line-box lifecycle/stale-state bug. Systematic-variant candidate: stale float and line-box state surviving discarded inline layout, and the in-flight migration of repaint-rect, visual-overflow, and offsetFromContainer()/mapLocalToContainer() accessors between renderer classes, where coordinate-space drift between the old and new owners is easy to introduce and hard to spot in tests.
Components
Security Fix History
Hardening Commits
- 2026-07-13 Fix Safer CPP warnings in FlexLayoutUtils
Recent Commits
- 2026-09-18 [cleanup] The box-only conditions of requiresLayer() belong to RenderBox
- 2026-09-17 Floats and inline-blocks are sized incorrectly when a child sets min-width: min-content or max-content
- 2026-09-16 [css-sizing] A min-content inline size should give both intrinsic contributions that size
- 2026-09-16 [cleanup] Move the repaint rects off RenderInline
- 2026-09-16 A float inside an inline box can be positioned twice when the line it was collected with is discarded ·
- 2026-09-16 [cleanup] Move mapLocalToContainer() up to RenderBoxModelObject
- 2026-09-16 [cleanup] Move the shared part of offsetFromContainer() to RenderBoxModelObject
- 2026-09-16 [cleanup] Build absoluteQuads() from localBorderBoxRects() on RenderBoxModelObject
- 2026-09-15 [cleanup] Move computeVisibleRectsInContainer() up to RenderBoxModelObject
- 2026-09-15 [cleanup] paddingBoxLogicalWidth() and paddingBoxLogicalHeight() work on fragmented and non-fragmented boxes
- 2026-09-15 [cleanup] Compute boundingRects() once from each renderer's local border box rects
- 2026-09-15 [cleanup] Move offsetForInFlowPositionedInline off RenderInline and into PositionedLayoutConstraints
- 2026-09-15 [cleanup] offsetLeft() and offsetTop() are the first fragment's border box location
- 2026-09-15 [cleanup] RenderInline::linesVisualOverflowBoundingBox is visualOverflowRect
- 2026-09-15 [cleanup] borderBoundingBox() does not need to be virtual
- 2026-09-15 [cleanup] RenderInline::linesBoundingBox is borderBoxRectInContainer
- 2026-09-15 [cleanup] Compute margins on RenderBoxModelObject like paddings and drop the no-argument accessors
- 2026-09-15 [cleanup] mayAffectLayout() belongs to SimplifyMarkupCommand, not to RenderInline
- 2026-09-14 [cleanup] Every box model object fixes up its out-of-flow list on a style change
- 2026-09-14 [cleanup] Move isEmptyInline() and firstContentfulChild() off RenderInline
- 2026-09-14 [cleanup] Move positionForPoint() off RenderInline
- 2026-09-14 [cleanup] Remove RenderBlock's pass-through repaint overrides
- 2026-09-14 View timeline animation freezes once a sticky inline ancestor sticks to the scroller
- 2026-09-14 [cleanup] Move the geometry mapping code RenderBox and RenderInline share to RenderBoxModelObject
- 2026-09-14 [cleanup] Have RenderInline return its line box rects in a vector instead of building them through three callback classe
- 2026-09-14 [cleanup] Type the inline box API on RenderBoxModelObject instead of RenderInline
- 2026-09-14 Transforming a table row group misplaces absolutely positioned children
- 2026-09-14 [out-of-flow] Resolved right and bottom are wrong inside a vertical inline containing block
- 2026-09-14 [Table] Orthogonal caption ignores its margin against the table edge
- 2026-09-14 [Flex] flex-wrap: balance puts every item after an overflowing item on its own line
- 2026-09-14 [Table] Orthogonal caption's margins are missing from the table
- 2026-09-11 [cleanup] Ask isInlineBox() instead of downcasting to RenderInline where the type is not needed
- 2026-09-11 [IFC] Remove BoxTreeUpdater::adjustStyleIfNeeded
- 2026-09-11 [cleanup] Rename RenderObject::isRenderInline() to isInlineBox()
- 2026-09-11 [cleanup] Compute inline box repaint rects through localRectsForRepaint like every other renderer
- 2026-09-11 [IFC] Stop forwarding overflow and text-overflow to anonymous block boxes
- 2026-09-11 [IFC] Stop adjusting internal table and table caption display values to block
- 2026-09-11 [cleanup] Move the legacy line boxes from RenderInline to RenderSVGInline, the only inline box that has them
- 2026-09-10 [IFC] Stop adjusting display: inline to inline-block on block container boxes
- 2026-09-10 [SVG] Mutating a display: contents tspan inside SVG text crashes with anonymous inline wrapper
- 2026-09-10 [IFC] Stop adjusting the display value of inline boxes with a non-inline display
- 2026-09-10 [IFC] Stop adjusting the display, float and clear values of line break boxes
- 2026-09-09 [cleanup] Remove RenderInline::updateHitTestResult and absoluteQuadsForSelection overrides that just duplicate the Rende
- 2026-09-09 [cleanup] Have RenderListOutsideMarker ask listMarkerSynthesizesGlyph() and a new shared listMarkerHasContent() instead
- 2026-09-08 [cleanup] Drop RenderListOutsideMarker::m_image, the marker box's copy of the list-style-image its style already holds
- 2026-09-08 Tab character renders too narrow when tab-size is small (proportional fonts)
- 2026-09-07 [cleanup] Drop RenderListOutsideMarker::m_textContent, the marker box's copy of text the list item already computes
- 2026-09-07 [list-marker] Give every outside list marker its content as renderers instead of hand-drawing the text and the image
- 2026-09-07 [list-marker] The outside list marker resolves its content during layout instead of when it changes
- 2026-09-07 [css-content] A gradient in the content property paints blank
- 2026-09-05 [list-marker] Position every outside list marker after layout, not just the ones whose first formatted line is in a desc
- 2026-09-05 [list-marker] AX: The list marker is missing from the stitched text of a list item with block content
- 2026-09-05 [list-marker] A float in the list item's content pushes the list marker out with the line
- 2026-09-04 [list-marker] text-indent moves the list marker with the text
- 2026-09-04 [list-marker] align-content leaves the list marker behind
- 2026-09-04 REGRESSION (Safari 27): line-height quirk not applied inside inline-block
- 2026-09-04 [list-marker] Rename RenderListMarker to RenderListOutsideMarker
- 2026-09-04 [list-marker] unicode-bidi and direction on ::marker have no effect on an inside marker
- 2026-09-03 [list-marker] Opening a <details> makes its summary one pixel shorter
- 2026-09-03 [list-marker] RenderListItem should answer for its marker instead of its callers consulting RenderListMarker
- 2026-09-03 `shape-outside` renders incorrectly when the float has margins
- 2026-08-31 Inset box-shadow with a large spread paints outside the box on an inline box
- 2026-08-31 [IFC] Repaint an ink overflow only style change without running inline layout
- 2026-08-31 [list-marker] Marker text should not be filled in lazily from RenderListMarker::layout()
- 2026-08-30 REGRESSION(319910@main): unifi.ui.com crashes with unbounded recursion in Element::resolveComputedStyle
- 2026-08-30 [Grid] Grid item with an aspect ratio keeps its stale inline contribution when the grid container shrinks
- 2026-08-30 [IFC] Compute style driven ink overflow in the integration layer instead of InlineDisplayContentBuilder
- 2026-08-30 REGRESSION(316706@main) tess.oconnor.cx: lots of spacing between image and content towards bottom of page
- 2026-08-28 [css-text-decor-4] Support percentages in text-decoration-inset
- 2026-08-28 [css-text-decor] Negative text-decoration-inset is clipped when the decoration propagates to a descendant inline box
- 2026-08-26 marketwatch.com: "Subscribe now" drop-down does not render anything
- 2026-08-26 [block-in-inline] A relatively positioned block level box on a line reports scrollable overflow as wide as the line
- 2026-08-26 [block-in-inline] An orthogonal block level box in an inline box makes its container as wide as the box instead of as it
- 2026-08-26 [block-in-inline] An orthogonal block level box in an inline box is misplaced
- 2026-08-25 A block level box on a line is left behind when a column break moves the line
- 2026-08-25 List marker is painted on top of the list item's content instead of behind it
- 2026-08-25 [inline] LineGeometry::initialLogicalTopLeft is left unset for a line built from cached maximum intrinsic width content
- 2026-08-25 [anon-block-removal] A grid-lanes container gets no anonymous item for its inline content
- 2026-08-24 [block-in-inline] Margin does not collapse after a self collapsing block level box on a line
- 2026-08-24 [anon-block-removal] Adjoining margins do not collapse when the container's first child is a float or an out-of-flow box
- 2026-08-23 [cleanup] Ask whether a document is fully active rather than whether it has a render tree
- 2026-08-23 [block] align-content moves a float child twice
- 2026-08-22 [list-marker] Lay bullet markers out as marker text so they take part in inline layout
- 2026-08-21 [list-marker] A list marker's text reaches names and values that asked for text without list markers
- 2026-08-21 [cleanup] Ask the list marker for its text through one accessor
- 2026-08-21 [cleanup] Replace Document's two render tree booleans with an explicit RenderTreeState
- 2026-08-21 [line-clamp] text-overflow ellipsis should show on non-clamped content
- 2026-08-19 [list-marker] A dynamic font change does not reach the list marker's content renderers
- 2026-08-18 REGRESSION(303972@main) [block-in-inline] Unexpected ellipsis shows up when line-clamp is applied
- 2026-08-17 [list-marker] List marker overlaps the list item content when the marker text is right-to-left
- 2026-08-17 [block-in-inline] A block level box on a line is handed its own float as an intruding float
- 2026-08-17 [anon-block-removal] An outside list marker keeps a line of its own when a block is appended to an empty list item
- 2026-08-17 Accessible name of a display: contents element includes text from its siblings
- 2026-08-17 anchor(right) does not resolve to an inline anchor's right edge in vertical-rl
- 2026-08-15 [block-in-inline] IFC cannot compute intrinsic widths when a line holds a block level box
- 2026-08-14 [block-in-inline] A box that collapsed through with clearance on a line pushes the content after it down by its margin
- 2026-08-12 [block-in-inline] A fieldset on a line takes its legend's overhang twice
- 2026-08-12 [anon-block-removal] A block level box is left inside an anonymous flex or grid item
- 2026-08-12 [block-in-inline] A float is not offered to the caret when its container has a block level box on a line
- 2026-08-12 [block-in-inline] A forced page break after a block level box on a line does not move the following content to the next
- 2026-08-10 [block-in-inline] line-clamp does not count the lines of a block level box on a line
- 2026-08-10 [block-in-inline] Selection gaps are not filled around a block level box on a line
- 2026-08-10 [block-in-inline] List based hit testing reports the container before a block level box on an earlier line
- 2026-08-10 [block-in-inline] An excluded list marker aligns with a block level box on a line instead of the first line of text
- 2026-08-10 [block-in-inline] A block level box on a line contributes its margin box to its container's overflow
- 2026-08-10 [block-in-inline] Only a relatively positioned inline offsets its out-of-flow children by the position of its line
- 2026-08-10 [remove-anon-block] A block level box on a line switches off text-wrap: balance for the whole container
- 2026-08-10 [anon-block-removal] An outside list marker makes its list item's children inline
- 2026-08-10 [list-marker] direction on ::marker moves the marker box to the wrong side of the list item
- 2026-08-10 [block-in-inline] A highlight on the line after a block level box covers the box's margin
- 2026-08-10 [block-in-inline] A block level box on a line does not start a new paragraph for unicode-bidi: plaintext or text-indent:
- 2026-08-10 A block level box on a line reports its scrollable overflow at its static position
- 2026-08-10 [block-in-inline] Text autosizing treats a block level box on a line as a line of text
- 2026-08-07 [block-in-inline] A block level box's margin after is counted twice when only that box needs layout
- 2026-08-07 [anon-block-removal] Fix editing/selection/end-of-document.html
- 2026-08-07 [block-in-inline] A block whose content is a table is treated as self-collapsing
- 2026-08-06 [anon-block-removal] White space after an out-of-flow or floated box gets a stray renderer
- 2026-08-06 [block-in-inline] Inline box with cloned decoration generates an extra line between two block level boxes
- 2026-08-06 [block-in-inline] Nested inline boxes around a block level box are stretched by their nesting depth
- 2026-08-06 [block-in-inline] Baseline of an inline-block whose last line box holds a block level box drops that line's offset
- 2026-08-06 [block-in-inline] Float inside a block nested in an inline box intrudes at the wrong position
- 2026-08-06 [anon-block-removal] Empty editable container with only an out-of-flow child loses its line
- 2026-08-05 [block-in-inline] Margin after a block level box on a line is lost on relayout
- 2026-08-05 [block-in-inline] Empty orthogonal block nested in an inline box stretches the line
- 2026-08-05 [block-in-inline] Baseline alignment ignores the offset of a block level box nested in an inline box
- 2026-08-05 [Flex] Remove margin-trim support from flex layout
- 2026-08-05 [block-in-inline] Trailing whitespace is not collapsed before a block nested in an inline box
- 2026-08-05 [anon-block-removal] Boxes that lay out their own children must keep their anonymous block wrappers
- 2026-08-05 [block-in-inline] Self collapsing block nested in an inline box loses its margin when the root has a border
- 2026-08-04 [block-in-inline] text-align:justify shouldn't justify the last line
- 2026-08-04 Keep the outside list marker at the list item and position it after layout
- 2026-07-30 [Flex] A flex item's flex base size should not be clamped by its own min/max-width
- 2026-07-29 [Flex] margin-trim is ignored for interior items when a wrapping flex container is sized to min-content
- 2026-07-29 [cleanup] Return the flex item's margin from flowAwareMarginBeforeForFlexItem's unreachable fallback
- 2026-07-29 [Flex] A flex line's cross size mixes the 'baseline' and 'last baseline' sharing groups
- 2026-07-29 [Flex] First baseline of a wrap-reverse flex container comes from the wrong flex line
- 2026-07-29 [cleanup] Fix the layering between the flex formatting context and its integration
- 2026-07-29 [cleanup] Stop reaching the flex integration layer through the renderer
- 2026-07-28 [cleanup] Compute the flex container's block-size definiteness up front
- 2026-07-28 [Flex] margin-trim on a content-sized flex container ignores 'order'
- 2026-07-28 Fix safer C++ failures in Source/WebCore/layout/flex
- 2026-07-28 [cleanup] Remove the column-reverse placement pass from the flex algorithm
- 2026-07-28 [cleanup] Have the flex algorithm place items in flow-relative coordinates
- 2026-07-27 [cleanup] Have the flex algorithm own which margins it trimmed
- 2026-07-27 [cleanup] Hide the flex formatting context's helper class internals
- 2026-07-27 [cleanup] Move the flex percentage-resolution definiteness checks off RenderFlexibleBox
- 2026-07-27 [cleanup] Have LayoutIntegration::FlexLayout store the flex layout result instead of unpacking it into members
- 2026-07-27 [cleanup] Move flex item list, painting, hit-testing and margin trimming off RenderFlexibleBox
- 2026-07-27 [cleanup] Move updateFlexContainerLogicalHeight to FlexIntegrationUtils
- 2026-07-27 N[cleanup] Have LayoutIntegration::FlexLayout own the per-layout flex state
- 2026-07-27 [cleanup] Have FlexFormattingContext own FlexIntegrationUtils instead of borrowing it from FlexLayout
- 2026-07-26 [cleanup] Remove the unread PostFlexScrollbarLayout flex layout phase
- 2026-07-26 [cleanup] Move the flex-item measurement caches off RenderFlexibleBox into a FlexItemContentCache
- 2026-07-26 [cleanup] Add FlexLayoutItem accessors so FlexFormattingContext stops dereferencing the flex item's renderer
- 2026-07-26 [cleanup] Stop FlexFormattingContext from reading flex-item margins and border/padding off the renderer
- 2026-07-25 [cleanup] Call FlexFormattingUtils statics directly instead of RenderFlexibleBox's flex-item query wrappers
- 2026-07-25 [cleanup] Move the flex item's remaining margin, min/max and size operations into FlexIntegrationUtils
- 2026-07-25 [cleanup] Have FlexIntegrationUtils own the flex item's intrinsic-size measurement
- 2026-07-25 Fold the cross-size-override/intrinsic-width scopes into computeMainAxisExtentForFlexItem
- 2026-07-25 [cleanup] Split the flex-item cross-size override and intrinsic-width flag into separate scopes
- 2026-07-25 [cleanup] Move flex-item main-axis measurement and its cross-axis-override scope into FlexIntegrationUtils
- 2026-07-25 [cleanup] Pass FlexLayoutItem instead of RenderBox to the remaining FlexFormattingUtils flex-item helpers
- 2026-07-25 [cleanup] Route FlexFormattingContext's last RenderFlexibleBox method calls through FlexIntegrationUtils
- 2026-07-24 [cleanup] Move FlexFormattingContext's flex-item render-tree mutations onto FlexIntegrationUtils
- 2026-07-24 [cleanup] Introduce LayoutIntegration::FlexIntegrationUtils and route FlexFormattingContext's render-tree access through
- 2026-07-24 [cleanup] Move the flex container's block-size definiteness onto FlexLayoutState
- 2026-07-24 [iOS] Converge iOS font metrics with macOS in Font::platformInit
- 2026-07-24 [cleanup] Move flex-item completed-layout tracking from RenderFlexibleBox into FlexLayoutState
- 2026-07-24 [cleanup] Move the flex first/last-line item counts onto LayoutIntegration::FlexLayout
- 2026-07-24 [cleanup] Drive the flex-item logical-height reset off the FlexLayoutState phase instead of a scoped flag
- 2026-07-23 [CSS] Inside list marker glyph can be painted a pixel off from equivalent inline text
- 2026-07-23 [cleanup] Replace RenderFlexibleBox's per-layout phase bools with a single monotonic FlexLayoutState
- 2026-07-23 [css-writing-modes] Incorrect intrinsic width contribution for orthogonal block children in block layout
- 2026-07-23 [cleanup] Drop the RenderFlexibleBox argument from FlexFormattingUtils' per-flex-item static helpers
- 2026-07-23 [cleanup] Pass FlexLayoutItem instead of RenderBox to FlexFormattingContext-only flex-item utilities
- 2026-07-22 [cleanup] Reduce FlexFormattingContext's direct dependency on RenderFlexibleBox
- 2026-07-22 [cleanup] Simplify flex baseline item selection to a single per-line scan
- 2026-07-22 [Flexbox] Replace RenderFlexibleBox's OrderIterator with an ordered flex item list built once per layout
- 2026-07-21 [Flexbox] Unify the two flex layout codepaths into a single render-tree-driven formatting context
- 2026-07-20 Mark CSSWrapInsideEnabled stable
- 2026-07-20 Mark CSSWhiteSpaceTrimEnabled stable
- 2026-07-20 Mark CSSTextDecorationInsetEnabled stable
- 2026-07-20 Mark CSSMarkerContentEnabled stable
- 2026-07-20 [css-ruby] Implement the 'spaces' value for the ruby-overhang property
- 2026-07-19 [cleanup] Name FlexLayout's per-item and per-line list types after the LFC FlexLayout aliases
- 2026-07-19 [cleanup] Read the flex container's scrollbar extents from constraints instead of off the container
- 2026-07-19 [cleanup] Read the flex container's cross-axis length-resolution size from a constraint instead of off the container
- 2026-07-19 [cleanup] Return the column flex container's main content extent from placeFlexItems instead of setting it on the contai
- 2026-07-19 [cleanup] Resolve a flex item's aspect-ratio percentage cross size against the container's logical inline size
- 2026-07-18 [cleanup] Read the flex container's outer main-axis extent from a constraint instead of off the container
- 2026-07-18 [cleanup] Return the flex container's used block extents from updateFlexContainerLogicalHeight instead of reading them b
- 2026-07-18 [cleanup] Report flex line boundaries to the inspector next to computeFlexLines
- 2026-07-18 [cleanup] Fold minimumHeightForLineIfEmpty into updateFlexContainerLogicalHeight
- 2026-07-18 [cleanup] Reverse column-reverse flex lines against the finalized container main size instead of reading it back mid-pla
- 2026-07-18 An empty editable flex container does not reserve a line's worth of block size in vertical writing modes
- 2026-07-18 [cleanup] Build the row flex content height in FlexLayout and resolve it in updateFlexContainerLogicalHeight
- 2026-07-18 [cleanup] Take FlexLayout's used cross size from updateFlexContainerLogicalHeight instead of reading it off the containe
- 2026-07-18 [cleanup] Read FlexLayout's row main inner size from the mainAxisAvailableSpace constraint
- 2026-07-18 [cleanup] Rename FlexLayout's positionList to flexItemsPositionList
- 2026-07-17 [cleanup] Drop RelayoutChildren from FlexLayout (carry it on FlexLayoutItem) and rename its layout entry points
- 2026-07-17 [cleanup] Commit the row flex container height before alignment and factor flex line positioning into a lambda
- 2026-07-17 [cleanup] Move computeFlexItemRects out of performFlexLayout into a dedicated FlexLayout member function
- 2026-07-17 [cleanup] Split the flex container logical-height update into a row content set and a shared finalize
- 2026-07-16 [cleanup] Move flex line positioning out of content sizing and pass the row content height as an optional
- 2026-07-16 [cleanup] Add FlexLayout available-space helpers mirroring Layout::FlexLayout and compute the flex gaps at use instead o
- 2026-07-16 [css-align] Support justify-self for out-of-flow boxes at the static position
- 2026-07-16 [cleanup] Reshape the flex length resolution (9.7) to mirror Layout::FlexLayout
- 2026-07-16 [WPT] white-space-trim-discard-inner-001.xht colors the brackets blue but its reference leaves them black
- 2026-07-16 [cleanup] Pass the flex item main-axis length-resolution size into FlexLayout as a constraint
- 2026-07-16 [cleanup] Have RenderFlexibleBox lay out a flex item after main sizing instead of FlexLayout
- 2026-07-16 [cleanup] Have RenderFlexibleBox lay out a flex item for stretch alignment instead of FlexLayout
- 2026-07-16 [cleanup] Resolve the flex container's logical height in RenderFlexibleBox instead of FlexLayout
- 2026-07-15 [cleanup] Pass the flex container's main-axis available space into FlexLayout as a constraint
- 2026-07-15 [cleanup] FlexLayout should ask RenderFlexibleBox for a flex item's block-axis content size
- 2026-07-15 [cleanup] Move RenderFlexibleBox::performFlexLayout into a new FlexLayout class
- 2026-07-15 [cleanup] Snapshot the flex item's main-axis-is-inline-axis flag on FlexLayoutItem
- 2026-07-15 [css-text-decor-4] Implement the text-decoration-inset property
- 2026-07-15 [cleanup] Route the remaining flex item core-sizing leaves through FlexLayoutItem
- 2026-07-15 [css-align] Support justify-self for block-level boxes
- 2026-07-15 [CSS] Support the content property on the ::marker pseudo-element
- 2026-07-15 [CSS] Support the white-space-trim: discard-inner value
- 2026-07-14 [cleanup] Snapshot the flex item cross-axis border+padding on FlexLayoutItem
- 2026-07-14 [css-text-4] Implement the wrap-inside property
- 2026-07-14 [CSS] Support the white-space-trim property (discard-before / discard-after)
- 2026-07-14 [cleanup] Snapshot the flex item main-axis margin on FlexLayoutItem instead of a parallel array
- 2026-07-13 [cleanup] Have RenderFlexibleBox's core sizing take FlexLayoutItem rather than the flex item renderer
- 2026-07-13 [cleanup] Fold computeNextFlexLine into computeFlexLines and compute the main-axis gap there
- 2026-07-13 [cleanup] Return positionList and crossSizeList from their producing phases in RenderFlexibleBox
- 2026-07-13 Fix Safer CPP warnings in FlexLayoutUtils
- 2026-07-13 [cleanup] Fold RenderFlexibleBox's cross-axis alignment offsets into the position list
- 2026-07-13 [cleanup] Group RenderFlexibleBox's member functions by layout phase
- 2026-07-13 [cleanup] Move RenderFlexibleBox's stateless flex queries and geometry helpers into a new FlexLayoutUtils class
- 2026-07-13 [cleanup] Inline the flex-length freeze helpers into resolveFlexibleLengthsForLineItems
- 2026-07-12 [cleanup] Move flex base and hypothetical main size off FlexLayoutItem into a per-item list
- 2026-07-12 [cleanup] Return cross-axis alignment offsets from the cross-axis phases instead of mutating the position list
- 2026-07-12 Fold the wrap-reverse and RTL-column flips into a computeFlexItemRects pass
- 2026-07-12 [cleanup] Remove repositionLogicalHeightDependentFlexItems, calling the cross-axis alignment phases directly
- 2026-07-12 [cleanup] Return the used cross size from applyStretchAlignmentToFlexItem
- 2026-07-12 [cleanup] Replace LineState with flex line ranges and parallel per-line lists
- 2026-07-12 [cleanup] Pass the used cross size into availableAlignmentSpaceForFlexItem and marginBoxAscentForFlexItem instead of rea
- 2026-07-11 [cleanup] Capture each flex item's used cross size in a list from computeCrossSizeForFlexItems
- 2026-07-11 [cleanup] Store each flex item's main-axis margin in a list instead of on FlexLayoutItem
- 2026-07-11 [cleanup] Store each flex item's flow-aware location in a list instead of on FlexLayoutItem
- 2026-07-11 [cleanup] Store each flex item's used main size in a list instead of on FlexLayoutItem
- 2026-07-11 REGRESSION (303972@main): [ iOS ] fast/block/basic/001.html is a flaky failure
- 2026-07-11 [cleanup] Track the flexible-length resolution's frozen flag and violations as local lists instead of on FlexLayoutItem
- 2026-07-11 [cleanup] Return per-item main sizes from computeMainSizeForFlexItems, not free space
- 2026-07-11 [cleanup] Split flex cross sizing into hypotheticalCrossSizeForFlexItems and crossSizeForFlexLines
- 2026-07-10 [cleanup] Apply flex item cross-axis alignment in a single final pass
- 2026-07-10 [cleanup] Route the right-to-left column flip through the flex item instead of the renderer
- 2026-07-10 [cleanup] Route cross-axis alignment through the flex item instead of the renderer
- 2026-07-10 [cleanup] Rename the flex cross-axis alignment phases to match FlexLayout::layout
- 2026-07-10 [cleanup] Separate flex item stretch from cross-axis alignment
- 2026-07-09 [cleanup] Separate main-axis alignment from flex line sizing
- 2026-07-09 [cleanup] Compute all flex line cross sizes before placing any items
- 2026-07-09 [cleanup] Measure each flex line's cross size before placing its items
- 2026-07-09 [cleanup] Lay out all flex items before placing them
- 2026-07-08 [cleanup] Resolve every flex line's main sizes before laying out the lines
- 2026-07-08 [cleanup] Remove the subpixelInlineLayoutEnabled setting and integer-snapping helpers now that subpixel inline layout al
- 2026-07-08 [cleanup] Give FlexLayoutItem a flow-aware location and reference baseline group members by index
- 2026-07-08 [cleanup] Represent flex lines as ranges over a stable flex item list
- 2026-07-08 [Flexbox] Split RenderFlexibleBox::performFlexLayout into named layout phases
- 2026-07-08 [cleanup] Reduce BaselineGroup to its block-flow direction and baseline preference
- 2026-07-08 CanvasRenderingContext2DBase::measureTextInternal: don't use the font proxy before it is realized
- 2026-07-08 [cleanup] Track baseline-sharing group membership in RenderFlexibleBox instead of on BaselineGroup
- 2026-07-07 [cleanup] Move the stateless baseline helpers out of BaselineAlignmentState into a BaselineAlignment struct
- 2026-07-07 [cleanup] Pass the alignment subject's writing mode into baseline alignment instead of reading it from the renderer
- 2026-07-01 [cleanup] Move members to the appropriate class among RenderBoxModelObject, RenderLayerModelObject and RenderBox
- 2026-07-01 [cleanup] Tidy up the RenderBox.h header (group methods, move inline bodies out)
- 2026-07-01 [cleanup] Rename RenderBox::frameRect()/setFrameRect() to borderBoxRectInContainer()/setBorderBoxRectInContainer()
- 2026-07-01 [cleanup] Remove the DOM-flavored client* API from RenderBox
- 2026-06-30 [cleanup] Use RenderBox::borderBoxSize() in size-only callers of frameRect()
- 2026-06-30 [cleanup] Use RenderBox::borderBoxSize() in size-only callers of borderBoxRect()
- 2026-06-30 [cleanup] Rename RenderBox::setWidth()/setHeight() to setBorderBoxWidth()/setBorderBoxHeight()
- 2026-06-29 [cleanup] Rename RenderBox::width()/height() to borderBoxWidth()/borderBoxHeight()
- 2026-06-29 [cleanup] Replace ShouldComputePreferred with IsComputingIntrinsicSize
- 2026-06-29 [cleanup] Remove redundant RenderBox::borderBoxLogicalSize
- 2026-06-29 [cleanup] Rename RenderBox::size()/setSize() to borderBoxSize()/setBorderBoxSize()
- 2026-06-26 WKWebView: PDF export creates broken text underlines
- 2026-06-18 fast/css/text-decorations-on-first-line-and-containing-block.html needs new fuzzy value after 315220@main
- 2026-06-17 [replaced] min-width is not honored over max-width when sizing a shrink-to-fit container around a replaced element
- 2026-06-16 [text-box-edge] ex misplaces the propagated underline (paints it twice)
- 2026-06-16 [subpixel] Underline under a <sup> is offset by a device pixel from the rest of the line
- 2026-06-15 Underline is drawn twice on a <sup>
- 2026-06-13 Text changes that don't modify the text element size in flex layout on new compositing layer don't trigger re-render.
- 2026-06-11 [iOS] fast/replaced/replaced-percentage-size-in-aspect-ratio-shrink-to-fit.html is a constant failure
- 2026-06-11 REGRESSION(313003@main): amctheaters.com: Sign in window grows when you move the mouse
- 2026-06-09 Line break should not appear after U+201D Right Double Quotation Mark
- 2026-06-05 [Flex] A flex item with min-width: min-content is clamped to a smaller max-width
- 2026-06-04 Clean up legacy "preferred width" naming in RenderBox intrinsic width sizing helpers
- 2026-06-04 Canvas fillText with textAlign=center misplaces complex-shaped text
- 2026-06-03 Text decoration is too thin over a descendant block
- 2026-06-02 REGRESSION (313727@main): Video renders incorrect aspect ratio within player container on Yahoo Sports
- 2026-06-02 Fix /css/css-sizing/margin-collapse-with-indefinite-block-size-001.html (002, 003, 004, 005)
- 2026-06-02 Line-through is too thin over a descendant inline box
- 2026-06-01 Enhanced <select>: hovering an option does not apply :hover descendant styles to its content
- 2026-05-31 Imported css/CSS2 reftests report ImageOnlyFailure because the css/CSS2/support/ directory is missing
- 2026-05-30 [cleanup] Rename m_min/maxContentLogicalWidth to m_min/maxContentLogicalWidthContribution
- 2026-05-29 [cleanup] Rename intrinsic width computation helpers from Preferred* to Intrinsic*
- 2026-05-29 [cleanup] Make computeIntrinsicLogicalWidths return std::pair<LayoutUnit, LayoutUnit> instead of using out-params
- 2026-05-29 Rename trimmedPreferredWidths/static preferredWidth helper
- 2026-05-29 [cleanup] Rename computeInlinePreferredLogicalWidths and adjustPreferredLogicalWidthsForBorderAndPadding to *IntrinsicLo
- 2026-05-29 [cleanup] Rename applyPreferredLogicalWidthQuirks, resetTableCellPreferredLogicalWidths, RenderText::computePreferredLog
- 2026-05-29 [cleanup] Rename setNeedsPreferredWidthsUpdate to invalidateContentLogicalWidths and align related cache-invalidation na
- 2026-05-29 Rename m_min/maxPreferredLogicalWidth and min/maxPreferredLogicalWidth() to m_min/maxContentLogicalWidth and min/maxCont
- 2026-05-28 Overlapping text in Activity panel in Slack web app
- 2026-05-28 [cleanup] Rename constrainPreferredLogicalWidthsByMinMax to constrainIntrinsicLogicalWidthContributionsByMinMax
- 2026-05-28 [cleanup] Rename computePreferredLogicalWidths to computeIntrinsicLogicalWidthContributions
- 2026-05-28 [cleanup] Fold computeChildPreferredLogicalWidths and the virtual computeChildIntrinsicLogicalWidths into one non-virtua
- 2026-05-28 REGRESSION(309405@main): scrypted has missing content
- 2026-05-27 [cleanup] Rename computeBlockPreferredLogicalWidths to computeBlockIntrinsicLogicalWidths
- 2026-05-27 [cleanup] Rename computePreferredWidthsForExcludedChildren to computeIntrinsicLogicalWidthsForFieldsetLegend
- 2026-05-26 [cleanup] Extract layoutFlexItemAfterMainSizing helper from layoutAndPlaceFlexItems in RenderFlexibleBox
- 2026-05-25 [cleanup] Move dirty-bit update out of flex base size path and rename m_relaidOutFlexItems
- 2026-05-25 [cleanup] Separate flex base/hypothetical main size determination from FlexLayoutItem construction
- 2026-05-25 [cleanup] Introduce flexItemWillBeRemoved as the cache cleanup entry point in RenderFlexibleBox
- 2026-05-25 [cleanup] Separate layout-forcing from size querying in RenderFlexibleBox flex base path
- 2026-05-25 [cleanup] Refactor RenderFlexibleBox::computeFlexItemMinMaxSizes into spec-aligned helpers
- 2026-05-23 [block-in-inline] inline-block baseline should fall back to bottom margin edge when content inside is block-in-inline on
- 2026-05-22 [cleanup] RenderFlexibleBox should own the policy for storing flex-item content heights
- 2026-05-22 [cleanup] Cache the inner flex base size in m_blockAxisSize so callers don't subtract border + padding
- 2026-05-22 [Flex] Aspect-ratio flex container resolves descendant percentage height against stale logical width during preferred-wi
- 2026-05-22 [cleanup] Replace "intrinsic main size" naming with spec-aligned "block axis size" in RenderFlexibleBox
- 2026-05-22 [cleanup] Refactor RenderFlexibleBox::maybeCacheFlexItemMainIntrinsicSize to return the intrinsic main size
- 2026-05-22 [Flex] Stretch-fit width with aspect-ratio should not provide definite cross size to flex items
- 2026-05-22 [IFC] English text getting cut off in RTL with some styles
- 2026-05-20 Revert 312799@main: broke some flex sizing
- 2026-05-19 [block-in-inline] Broken layout with paragraph spacing on Apple Support page
- 2026-05-19 [block-in-inline] Apply margin of preceding block content at line start eagerly
- 2026-05-19 CSS: weird interaction between img with max-width and other elements causes parent element width to go berserk
- 2026-05-19 Preferred width does not trim trailing whitespace before preserved newline
- 2026-05-19 REGRESSION (312086@main): Crash in WebCore::PositionedLayoutConstraints::PositionedLayoutConstraints; WebCore::RenderBox
- 2026-05-16 "Reveal password" button in schwab.com login field is misplaced
- 2026-05-16 REGRESSION (309405@main): CSS stretch and anonymous wrappers
- 2026-05-15 [cleanup] Replace chained assignments in intrinsic width computations
- 2026-05-15 [cleanup] imported/w3c/web-platform-tests/css/css-flexbox/flex-aspect-ratio-img-column-017.html should not check layout
- 2026-05-14 [Flex] SVG image with no intrinsic dimensions collapses to height 0 in column flex container
- 2026-05-14 [Flex] Flex container with aspect-ratio-derived height does not provide definite cross size to flex items
- 2026-05-14 [Flex] position: absolute parent breaks flex child aspect-ratios
- 2026-05-13 Flex container with border-box sizing provides wrong cross size to stretched flex items
- 2026-05-13 Flex item with aspect-ratio keeps stale height after container resize
- 2026-05-13 REGRESSION(310995@main): Table row does not repaint at old position when preceding row changes size
- 2026-05-12 [Replaced] Apply transferred min/max block-size constraints for intrinsic keyword widths
- 2026-05-12 [webkit-box] Allow z-index on static display:-webkit-box items
- 2026-05-12 [cleanup] Rename computePreferredLogicalWidths helper to constrainPreferredLogicalWidthsByMinMax and simplify its signat
- 2026-05-12 Percentage max-width on aspect-ratio box resolves against wrong axis in perpendicular writing mode
- 2026-05-12 Non-replaced block with aspect-ratio and percentage max-width produces zero width during intrinsic sizing
- 2026-05-11 Replaced element with percentage width and resolvable percentage height produces wrong intrinsic width
- 2026-05-11 Clean up aspect ratio API: move preferredAspectRatio() to RenderBox, rename FloatSize variant to preferredAspectRatioAsS
- 2026-05-11 Remove virtual computeIntrinsicSize() from RenderReplaced and consolidate logic into a static helper
- 2026-05-10 [cleanup] Clean up aspect ratio naming: remove computeIntrinsicAspectRatio, intrinsicRatio, isRenderReplacedWithIntrinsi
- 2026-05-10 Rename aspect ratio helpers on RenderReplaced and RenderBox
- 2026-05-10 Nested multicolumn (3+ levels) fails to paginate content across pages
- 2026-05-10 [cleanup] Refactor replaced element intrinsic size and aspect ratio computation
- 2026-05-10 Refactor computeSizingKeywordLogicalContentHeightUsingGeneric to consolidate grid item stretch handling into a single br
- 2026-05-10 Rename embeddedContentBox() to embeddedSVGRoot() and tighten return type to RenderReplaced*
- 2026-05-08 REGRESSION (309405@main): wral.com has lots of blank areas
- 2026-05-08 REGRESSION(307212@main): [iOS] compositing/overflow/rtl-scrollbar-layer-positioning.html is a constant text failure
- 2026-05-07 Orthogonal child with percentage max-width gets zero preferred width
- 2026-05-07 English text getting cut off in RTL with some styles
- 2026-05-06 REGRESSION(311971@main): Fix imported/w3c/web-platform-tests/webvtt/rendering/cues-with-video/processing-model/selectors
- 2026-05-06 play.projectprismatic.com assert while loading
- 2026-05-05 [block-in-inline] Container does not expand when max-height is removed
- 2026-05-04 [cleanup] Move helper lambdas from FloatingContext::constraints to local static functions
- 2026-05-04 Percent height border-box content should get correct height in percent height cells
- 2026-05-04 [Flex] min-content sized flex item should not be scrollable
- 2026-05-04 shape-outside with margin-box is broken in RTL when margins are asymmetric
- 2026-05-04 Numbered list item markers have more spacing in WebKit than other browser engines
- 2026-05-04 [block-in-inline] mercedes-benz.com: `arrow` next to text in menu drop-down is not on same baseline
- 2026-05-01 Flex item with aspect-ratio and content-box padding computes wrong height in column flex
- 2026-05-01 REGRESSION(312300@main): [macOS] TestWebKitAPI.UnifiedPDF.EmbeddedPDFScrollbarDoesNotAdaptToDarkMode is flaky failure
- 2026-04-30 Clean up computeMainSizeFromAspectRatioUsing to separate intrinsic vs CSS aspect ratio paths
- 2026-04-30 "scrollbar-gutter" on root element is misplaced in RTL layouts
- 2026-04-30 REGRESSION (304513@main): Cars and Bids email formatted weird
- 2026-04-30 Absolutely positioned table ignores max-height
- 2026-04-29 Absolutely positioned table ignores min-height and shrinks below content height
- 2026-04-29 Always-on scrollbars are invisible when on root element of nested documents
- 2026-04-29 Add debug assert to verify hasDefiniteHeightByStyle agrees with the slow path
- 2026-04-29 Fix imported/w3c/web-platform-tests/css/css-tables/absolute-tables-007.html
- 2026-04-29 REGRESSION(311201@main): Crash when loading drafts.csswg.org/css-grid-3
- 2026-04-28 Fix imported/w3c/web-platform-tests/css/css-tables/absolute-tables-015.html
- 2026-04-28 Fix imported/w3c/web-platform-tests/css/css-tables/absolute-tables-002.html
- 2026-04-27 Assert in processLineBreakingResult when line-start-prohibited character consumes entire text item
- 2026-04-27 Aspect-ratio automatic minimum should not override flex/grid stretch on the cross axis
- 2026-04-27 Resize handle doesn't work on iframe container when handle overlaps iframe
- 2026-04-27 Fix imported/w3c/web-platform-tests/css/css-sizing/stretch/stretch-block-size-003.html
- 2026-04-27 Fix imported/w3c/web-platform-tests/css/css-sizing/aspect-ratio/flex-aspect-ratio-053.html
- 2026-04-27 Fix imported/w3c/web-platform-tests/css/css-sizing/aspect-ratio/block-aspect-ratio-042.html -043.html
- 2026-04-27 Float with margin-start overlaps adjacent float
- 2026-04-27 BFC with margin-start overlaps adjacent float
- 2026-04-27 Fix imported/w3c/web-platform-tests/css/css-sizing/inline-intrinsic-size-calc.html
- 2026-04-25 REGRESSION (311908@main): Autoplay button in YouTube controls is misplaced
- 2026-04-25 Fix imported/w3c/web-platform-tests/css/css-lists/li-value-reversed-001.html -002.html and -003.html
- 2026-04-25 REGRESSION(310995@main): Crash in RenderTableSection::baselineFromCellContentEdges
- 2026-04-24 Fix imported/w3c/web-platform-tests/css/css-sizing/calc-margins-block.html, calc-margins-fieldset-content.html, calc-mar
- 2026-04-24 [Flex] Fix imported/w3c/web-platform-tests/css/css-sizing/calc-margins-flex.html
- 2026-04-24 Rename isAnonymousForPercentageResolution to shouldSkipForPercentageResolution
- 2026-04-24 Fix imported/w3c/web-platform-tests/css/css-text/text-indent/text-indent-tab-positions-001.html
- 2026-04-24 Relative position percentage top/bottom should resolve when containing block has aspect-ratio
- 2026-04-23 [Flex] Avoid expensive percentage height walk when resolving relative position offsets
- 2026-04-23 Fix imported/w3c/web-platform-tests/css/css-text-decor/text-decoration-skip-ink-vertical-001.html -002.html
- 2026-04-23 Fix imported/w3c/web-platform-tests/css/css-writing-modes/margin-collapse-vrl-022.xht
- 2026-04-23 Inserting a text node before ::first-letter can crash on CheckedPtr
- 2026-04-21 [Flex] Split mainAxisContentExtent into clearer helpers
- 2026-04-21 Range.getBoundingClientRect reports wrong Y for text on second line
- 2026-04-20 Vertical writing-mode content incorrectly wraps when parent has auto height
- 2026-04-20 Column wrap flex inside column flex wraps incorrectly when flex-basis overrides height
- 2026-04-20 Stretch relayout should propagate to deeply nested percent-height descendants
- 2026-04-20 Fieldset with legend is too tall on first layout when it's a flex item
- 2026-04-20 [block-in-inline] margin-trim: block-start does not apply to blocks nested in inline boxes
- 2026-04-20 Percentage height inside flex item should resolve in quirks mode
- 2026-04-20 [css-flexbox] Definiteness evaluation should use used flex-basis instead of specified
- 2026-04-20 [Flex] Fix imported/w3c/web-platform-tests/css/css-flexbox/flexbox-min-width-auto-005.html and -006.html
- 2026-04-17 [Flex] flex-grow does not distribute free space in multi-line column flex
- 2026-04-17 [Flex] Have layoutAndPlaceFlexItems return LineState instead of populating the vector directly
- 2026-04-17 [Flex] Fix imported/w3c/web-platform-tests/css/css-flexbox/flex-minimum-height-flex-items-023.html
- 2026-04-16 [IFC] Fix imported/w3c/web-platform-tests/css/css-text/white-space/white-space-pre-wrap-justify-003.html
- 2026-04-16 out-of-flow content has the incorrect height when its height is set to fit-content
- 2026-04-15 Elements with border, position: absolute and aspect-ratio: 1 are not square
- 2026-04-15 Deleting the first letter character in a contenteditable element with ::first-letter leaves the old letter visible
- 2026-04-15 CSS1: character styled with :first-letter is not selectable
- 2026-04-15 Broken 'button' layout with display:table on www.weekly10.com
- 2026-04-15 Element Position is incorrect with regards to the ancestor box
- 2026-04-15 Margin of last element bleeding out of the parent with min-height
- 2026-04-14 Removing block between inline and float should put the two on the same line
- 2026-04-14 [First-Letter] Fix ::first-letter disappearing after style change.
- 2026-04-14 REGRESSION(309405@main): Password field shortens whenever selected
- 2026-04-13 Inline-flex container with column flex-direction fails to update width for uncached images
- 2026-04-13 Non-replaced element with aspect-ratio enforces automatic minimum, even if explicitly set to 0
- 2026-04-13 word-break: keep-all incorrectly suppresses break opportunities at CJK punctuation
- 2026-04-13 [IFC] word-break: break-all allows CJK close punctuation to start a line
- 2026-04-13 Range.getClientRects() returns wrong rect for first-letter styled text
- 2026-04-13 `position: absolute` with inner `max-height: 100%` makes `height: max-content` resolve to 0
- 2026-04-13 REGRESSION (308212@main) hp.com: HP Financing logo overlaps with text
- 2026-04-13 Incorrect box sizing on span when it has no siblings and `padding-left + margin-left === 0`
- 2026-04-13 Fieldset with legend is too tall on first layout when it's a flex item
- 2026-04-11 [Table] Incorrect distributed height when <td> height is set
- 2026-04-11 `position: relative` doesn't work as expected on table row
- 2026-04-11 wooting.io: inline-block <img> shows a larger border than in firefox/chrome
- 2026-04-09 `height: 100%` changes layout when the parent height is defined via aspect-ratio
- 2026-04-09 <br />'s as direct children of <ul> between every two adjecent <li> elements causes misalignment
- 2026-04-08 first-letter not updated when ::before pseudo-element is dynamically added
- 2026-04-07 [first-letter] Hovering over ::first-letter text shows pointer cursor instead of I-beam
- 2026-04-07 Inserting a text node before ::first-letter renders the text in the wrong order
- 2026-04-07 Flex items with different order values cause wrong baseline alignment
- 2026-03-31 Checkbox boundary (outline) appears misaligned in Safari on goindigo.in
- 2026-03-31 Nested empty inline boxes accumulate incorrect vertical offset
- 2026-03-30 [cleanup] Defer inline box ink overflow computation to collectInkOverflowForInlineBoxes
- 2026-03-27 [block-in-inline] ASSERT_NOT_REACHED in RenderBlockFlow::layoutSimpleBlockContentInInline
- 2026-03-26 Nested children of popover fail to render when position:absolute
- 2026-03-26 airindiaexpress.com: the checkbox is overlapping with the text
- 2026-03-26 [cleanup] Remove redundant forEachRenderLayer from Element
- 2026-03-25 fast/text/simple-line-hyphens-with-text-align.html is a constant IMAGE failure
- 2026-03-25 Stale inline content after removing descendants from a fixed-height container
- 2026-03-25 REGRESSION(309272@main): Caused a crash in RenderTreeBuilder::List::updateItemMarker
- 2026-03-24 Move table-sizing-with-adjacent-floats test to WPT directory
- 2026-03-23 imported/w3c/web-platform-tests/css/css-ui/text-overflow-with-selection.html is a constant IMAGE failure
- 2026-03-23 RenderVideo::styleDidChange should not call setNeedsLayout when there's no old style
- 2026-03-22 [IFC] U+2029 should act as a forced line break and a bidi paragraph separator
- 2026-03-22 [ruby] Crash in WebCore::RenderTreeBuilder::splitAnonymousBoxesAroundChild; RenderTreeBuilder::Inline::attach
- 2026-03-22 [cleanup] Replace wtf::range with std::span in ruby content aligner
- 2026-03-22 [cleanup] Rename ruby's expandInlineBoxWithDescendants to expandInlineBoxToEncloseContent
- 2026-03-22 Render U+2028 LINE SEPARATOR as a forced line break
- 2026-03-22 [cleanup] All ruby base content needs bidi reordering (based on style, not content)
- 2026-03-16 Underlines are split when ruby base is expanded because of long ruby text
- 2026-03-16 [cleanup] Add InlineIterator::Box::isRubyBase
- 2026-03-16 [cleanup] TextDecorationPainter's BackgroundDecorationGeometry should include the width for decoration
- 2026-03-16 [grid] Grid container fails to avoid float boxes
- 2026-03-16 Float right table overlaps other table on Wikipedia
- 2026-03-14 [subpixel-inline-layout] Change status from 'Preview' to 'Stable'
- 2026-03-11 REGRESSION (308037@main): fast/ruby/ruby-expansion-cjk-4.html is a consistent image failure
- 2026-03-11 [cleanup] Collect overflow functions in InlineDisplayContentBuilder should take span of display boxes
- 2026-03-10 [cleanup] InlineDisplayContentBuilder::processRubyContent should not expand the display box list
- 2026-03-10 [cleanup] Ellipsis functions (line-clamp etc) in InlineDisplayContentBuilder should take span of display boxes
- 2026-03-09 [cleanup] Rename LineLayout::shiftLinesBy to shiftLinesByInBlockDirection
- 2026-03-09 [block-in-inline] Line is considered empty even if a line spanning inline box has cloned decoration
- 2026-03-09 Layout of inline-block vertical-rl differs from other browsers
- 2026-03-02 [IFC] youtube.com ASSERT(inlineTextBox->style().whiteSpaceCollapse() != WhiteSpaceCollapse::Preserve)
- 2026-03-02 [block-in-inline] ASSERT in ~RenderTreeNeedsLayoutChecker with float and margin
- 2026-02-28 [block-in-inline] Incorrect display box geometry on before/after lines for inline boxes
- 2026-02-27 [cleanup] In IFC, the only elements considered opaque boxes are those that are positioned out of flow.
- 2026-02-26 [IFC] Do not create display boxes on constrained lines for empty spanning inline boxes
- 2026-02-26 REGRESSION(307394@main): TestWebKitAPI.DocumentEditingContext/AccessibilityTests/RequestTextInputContext tests are const
- 2026-02-26 REGRESSION(306349@main): [iOS Release] imported/w3c/web-platform-tests/css/filter-effects/backdrop-filter-boundary.html
- 2026-02-25 [block-in-inline] Self collapsed block lines should offset and not stretch
- 2026-02-25 [cleanup] fast/dom/34176.html should not leak <b> to subsequent subtests
- 2026-02-25 `getClientRects-inline-with-block-child.html` started to fail recently
- 2026-02-23 Follow-up: address comment after 308037@main
- 2026-02-23 [IFC] Inflated glyph overflow leads to line shifts when paginated
- 2026-02-22 [block-in-inline] Consider margin of preceding block when placing out-of-flow box inside inline
- 2026-02-20 [block-in-inline] Incorrect <br> position when block margin is present
- 2026-02-20 [block-in-inline] Empty <span></span> with decoration is incorrectly positioned when sibling block margin is present
- 2026-02-20 [cleanup] LineLayoutResult's LineGeometry should hold on to initial line top
- 2026-02-20 REGRESSION (303091@main): getClientRects() can include rects with no width and height
- 2026-02-20 [block-in-inline] Missing content when block is inside an inline box with layer
- 2026-02-19 [cleanup] Merge Line's hasContent and hasContentOrListMarker
- 2026-02-17 Make Block and inline-block have the same baseline when `overflow: hidden`
- 2026-02-17 (Regression: Safari 26.x) Underline animation leaves traces (repaint issue)
- 2026-02-16 text-indent not working on contenteditable elements in Safari 26.2
- 2026-02-16 [IFC][cleanup] Remove unused functions