pxlcoder
Platform security specialist
Summary
pxlcoder works primarily on the iOS/Cocoa side of WebKit — form controls and their platform UI (date/time inputs, `<input type=checkbox switch>`, datalist dropdowns, color pickers), plus WKContentView, scroll view, and display-link plumbing, with a steady stream of unified-sources build fixes and REGRESSION cleanups alongside. The security work is small but consistent in kind: object-lifetime bugs in form-control and content-view teardown paths (a UAF in `BaseDateAndTimeInputType::didChangeValueFromControl`, a UAF in `-[WKContentView .cxx_destruct]`), echoed by non-security fixes in the same vein — a use-after-move in `WebDataListSuggestionsDropdownIOS.mm` and `CFNotificationCenter` observer registration leaks in `WebProcessPool`. Systematic-variant candidate: the coupling between HTML input-type objects and their retained iOS UI delegates, where destruction ordering and stale observer/callback registrations have repeatedly produced dangling references; the haptic-feedback fix also flags untrusted-event gating on switch inputs as a distinct, less-explored surface.
Components
Security Fix History
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-06-02 Fix the build after 314338@main and 314377@main
- 2026-06-02 Fix the build after 314338@main
- 2026-05-29 Use-After-Free in `BaseDateAndTimeInputType::didChangeValueFromControl` 2026-W21
- 2026-05-21 Haptic feedback for <input type=checkbox switch> can be triggered with a programmatic click on an associated label 2026-W20
- 2026-05-08 Unified sources build fix
- 2026-05-07 [Cocoa] Fix `CFNotificationCenter` observer registration leaks in `WebProcessPool`
- 2026-05-01 [Unified PDF] Add an internal setting to align the trailing page of a PDF in two-up display to the left edge
- 2026-04-27 Unified sources build fix
- 2026-04-27 Unified sources build fix
- 2026-04-24 Remove redundant null-check in `RemoteLayerTreePropertyApplier`
- 2026-04-23 [iOS] Remove use of deprecated `UIColorPickerViewController` API
- 2026-04-21 Remove unused code in WKScrollView.mm
- 2026-04-17 Fix use-after-move in WebDataListSuggestionsDropdownIOS.mm
- 2026-04-14 [iOS] Crashes may occur under `refreshRate` observation in `WKDisplayLinkHandler`
- 2026-03-30 Unified sources build fix