aprotyas
Platform hardening contributor
Summary
Works primarily in the WebKit and Platform layers on macOS/iOS UI-process plumbing — the PDF HUD (including its Site Isolation behavior in cross-origin `<iframe src=pdf>`), ViewGestureController and gesture/event handling without a backing NSEvent, and SwiftBrowser URL-bar navigation, with recurring gardening, test-suite, and revert commits alongside the feature work. The small security cluster sits squarely in that same surface: a use-after-free from repeated RequestPointerLock IPC and a compromised-content path-separator issue in PDF suggested filenames, both cases of UI-process code trusting sequencing or strings from the web content process. Where to look next: the PDF HUD and gesture-event IPC boundaries, where cross-origin frame geometry and NSEvent-less event synthesis are actively being reworked and message-ordering assumptions are still in flux.
Components
Security Fix History
- 2026-07-01 REGRESSION(298821@main): [iOS] RequestPointerLock IPC twice in succession can produce use-after-free of unretained GCMou ·
- 2026-06-30 Compromised web content processes can use percent-encoded path separators in PDF suggested filenames to write outside te ·
- 2026-05-01 WebPaymentCoordinatorProxy_ShowPaymentUI handles arbitrary untyped image data from WebContent Process 2026-W17
Hardening Commits
- 2026-02-16 Refactor two-phase click adjacent quirks and gesture validation to use feature flag instead of platform guard
- 2026-02-16 Refactor PDF code supporting two-phase clicks to use feature flag instead of platform guard
- 2026-02-14 Refactor two-phase click handling to use feature flag instead of platform guard
Recent Commits
- 2026-08-07 [SwiftBrowser] URL field does not reflect the committed URL after navigation
- 2026-08-07 [macOS] Support gesture event handling without a backing NSEvent
- 2026-08-06 [SwiftBrowser] Typing webkit.org in the URL bar leads to a failed provisional navigation
- 2026-08-06 ViewGestureController magnification gesture handling should not need to be fed a NSEvent instance
- 2026-08-05 Unused `event` lambda capture in EventDispatcher::GestureEvent IPC reply handler
- 2026-08-03 Unreviewed, reverting 318471@main (c17b54571809)
- 2026-08-03 Consolidate os_variant_is_basesystem() callers to a common WTF wrapper
- 2026-08-02 NEW TEST(317936@main): TestWebKitAPI.UnifiedPDF.PDFHUDMultiplePluginsDoNotInterceptHitTesting is a flaky failure on macO
- 2026-07-31 [Site Isolation] PDF HUD of cross-origin <iframe src=pdf> gets displaced by main frame scroll offset
- 2026-07-31 [Gardening] REGRESSION(318122@main): http/wpt/identity/digital-credential-openid4vp-request-parsing.https.html is consis
- 2026-07-29 EmbeddedPDFHUDSiteIsolation test suite should toggle SiteIsolationSharedProcessEnabled
- 2026-07-29 [Site Isolation] Add TextStream logging support to generated ProcessSyncData types
- 2026-07-29 WebPage::updatePluginsActiveAndFocusedState() is an unnecessary declaration
- 2026-07-28 Unreviewed, reverting 318040@main (21a90b4135be)
- 2026-07-28 REGRESSION(318040@main): Broke internal watchOS and tvOS builds