basuke
WebKit contributor
Summary
basuke works primarily on WebKit/WebCore navigation and process-model plumbing — a sustained WebTransport buildout (IDL surface for writers, send streams, `exportKeyingMaterial()`, WPT h3 server integration), plus Navigation API traversal, back/forward cache interaction, and Site Isolation as a recurring third component. The handful of security-tagged commits cluster on the IPC and process boundary rather than memory safety: filename validation in `decidePolicyForNavigationAction`, a `MESSAGE_CHECK` added to SharedWorker context-connection setup, and removal of a stale response-access restriction from `NetworkResourceLoadParameters` — the same trust boundary their Site Isolation work runs through. Systematic-variant candidate: WebTransport's IDL surface is new and moving fast, and the traversal/BFCache interaction with RemoteFrames (including a document sharing a BrowsingContextGroup with a cached page, and a network process crash on cross-origin `target=_blank` downloads) is a state-machine area where lifetime and origin assumptions are still settling.
Components
Security Fix History
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-08-06 [WebTransport] Incoming datagram bursts are dropped because delivery bypasses the event loop
- 2026-07-23 [WebTransport] Add WebTransportWriter IDL interface and WebTransportSendStream.getWriter()
- 2026-07-22 Fix CMake build on arm64 broken by 317696@main (Enable ASM support in dav1d)
- 2026-07-22 [WebTransport] Add exportKeyingMaterial() IDL interface
- 2026-07-22 [WPT] Update imported streams.idl and fs.idl to async_iterable syntax
- 2026-07-21 [WebTransport] WebTransport pages should be restorable from the back/forward cache
- 2026-07-21 [WebTransport] WebTransportSendStream should reflect sendOrder and sendGroup from creation options
- 2026-07-21 [WebTransport] Make WebTransportSendStream.sendOrder and WebTransportSendStreamOptions non-nullable to match spec
- 2026-07-17 [WebTransport] Run the WPT webtransport-h3 server in the layout test harness and enable the passing tests
- 2026-07-16 Unreviewed, reverting 317331@main (003de9b1e25a497a93110b2ef9d6914afcf9b3a0)
- 2026-07-16 [Page Loading] Network process crashes when downloading a cross-origin target=_blank link
- 2026-07-16 [WebTransport] Run the WPT webtransport-h3 server in the layout test harness and enable the passing tests
- 2026-07-15 [Re-land] [NavigationScheduler] history.back/forward/go(n) coalescing across processes via UIProcess session history tra
- 2026-07-15 [Navigation API] Fix wait-for-all implementation to not use wrapper promise
- 2026-07-13 [Site Isolation] A new document can share a BrowsingContextGroup with a back/forward-cached page