annevk

WebCore contributor

396 commits (7mo)
1 security fixes
View all commits on GitHub ↗

Summary

annevk works almost entirely in WebCore on DOM and web-standards conformance — custom element constructor maps, node realm assignment, `replaceChildren()` on documents, heading offset attributes — with a secondary cluster in URL/IDNA parsing (a userinfo colon misparsed as the port separator, `"://"` links never marked visited, Punycode-valid/UTS46-invalid test coverage) and regular WPT resynchronization. Much of the recent output is feature-flag lifecycle work: marking preferences stable and deleting retired ones, which makes this commit stream a running index of which experimental features have just flipped to default-on. Security-classified fixes are rare and incidental (a UAF in XRSessionInit dictionary conversion via `sequence<any>`); the audit angle is the newly-stabilized flag list as fresh default-reachable attack surface, plus the URL parser, where two distinct misparses in the same period make it a reasonable target for variant sweeping — and the realm-correctness work is adjacent to classic cross-realm object confusion.

Components

WebCore
66%
WTF
12%
Platform
11%
WebKit
6%
JSC
2%
Other
2%

Security Fix History

Hardening Commits

Recent Commits

1 / 27

← All Contributors