stwrt

WebCore contributor

135 commits (11mo)
2 security fixes
View all commits on GitHub ↗

Summary

stwrt's work splits between Web Inspector protocol support for Site Isolation — surfacing cross-origin frames in `Page.getResourceTree`, `Page.frameNavigated`/`frameDetached`, and making frame protocol IDs collision-free and hosting-process-qualified — and routine maintenance: css-grid WPT test imports and CMake/build fixes across macOS and Cocoa headers. The single security fix is unrelated to that cluster: a mismatched `deflateEnd()` after `inflateInit2()` in ZStream reachable through `DecompressionStream`, an invalid free from stream-API state confusion. Where to look next: the cross-process frame identity plumbing. Commits that redefine how frame IDs are minted and how UIProcess aggregates resources from multiple web processes are the kind of change where inspector-visible frame identity and the security-origin checks behind it can diverge.

Components

WebCore
27%
WebKit
17%
WebInspector
17%
WebCore CSS
15%
Platform
8%
Site Isolation
7%

Security Fix History

Hardening Commits

Recent Commits

1 / 9

← All Contributors