<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>303958</bug_id>
          
          <creation_ts>2025-12-10 17:09:57 -0800</creation_ts>
          <short_desc>Layout milestone notifications should be dispatched asynchronously</short_desc>
          <delta_ts>2025-12-18 19:28:50 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>REOPENED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>304460</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter>jlee53</reporter>
          <assigned_to>jlee53</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2164971</commentid>
    <comment_count>0</comment_count>
    <who name="">jlee53</who>
    <bug_when>2025-12-10 17:09:57 -0800</bug_when>
    <thetext>Javascript execution should not happen during in the process of updating the layout. When a layout milestone notification fires, the layout may not be completed but client callbacks to layout milestone notifications can trigger Javascript execution. This results in javascript execution failing (and consequently crashing) to run in the middle of the layout process because it is correctly not permitted to do so. We delay firing layout milestone notifications by dispatching them asychronously in order to prevent this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2164972</commentid>
    <comment_count>1</comment_count>
    <who name="">jlee53</who>
    <bug_when>2025-12-10 17:10:24 -0800</bug_when>
    <thetext>&lt;rdar://problem/153254633&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2164973</commentid>
    <comment_count>2</comment_count>
    <who name="">jlee53</who>
    <bug_when>2025-12-10 17:11:50 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/55213</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2166350</commentid>
    <comment_count>3</comment_count>
    <who name="">jlee53</who>
    <bug_when>2025-12-16 13:46:31 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/55502</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2166497</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2025-12-16 19:58:34 -0800</bug_when>
    <thetext>Committed 304572@main (bf24e9a12c17): &lt;https://commits.webkit.org/304572@main&gt;

Reviewed commits have been landed. Closing PR #55213 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2167156</commentid>
    <comment_count>5</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2025-12-18 19:28:49 -0800</bug_when>
    <thetext>Reopened Bugzilla.
304572@main caused a 17% PLT regression, tracking revert in https://bugs.webkit.org/show_bug.cgi?id=304460.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>