288057 2025-02-19 21:08:15 -0800 [WebDriver][BiDi] Implement the script.addPreloadScript command 2026-04-08 20:11:53 -0700 1 1 1 Unclassified WebKit WebDriver WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=288062 https://bugs.webkit.org/show_bug.cgi?id=288065 InRadar P2 Normal --- 281937 1 lmoura webkit-unassigned bburg sergedeh webkit-bug-importer oldest_to_newest 2096229 0 lmoura 2025-02-19 21:08:15 -0800 https://w3c.github.io/webdriver-bidi/#command-script-addPreloadScript One of the cornerstones used by clients to make the browser to push custom messages through the `channels`, delivered as `script.message` events. 2098604 1 webkit-bug-importer 2025-02-26 21:09:14 -0800 <rdar://problem/145716105> 2196272 2 sergedeh 2026-04-02 05:47:18 -0700 Some defensive ideas for resource limits to prevent potential denial of service issues with preload scripts: 1. **Maximum number of preload scripts per session** - Cap number of preload scripts per session? - This would prevent memory exhaustion from unbounded script accumulation - We'd need to return an appropriate BiDi error when the limit is exceeded 2. **Maximum function declaration length** - Cap size of function declaration - Prevents processing extremely large script payloads - Helps protect against memory and parsing overhead attacks 3. **Total memory limit for all preload scripts** - An aggregate limit across all preload scripts in a session - Could track both source code size and runtime overhead - Prevents cumulative memory exhaustion 2198230 3 ews-feeder 2026-04-08 20:11:51 -0700 Committed 310815@main (17a80254d05d): <https://commits.webkit.org/310815@main> Reviewed commits have been landed. Closing PR #57773 and removing active labels.