Bug 305505

Summary: Use URL's whole length instead of pathEnd() for URL size checks.
Product: WebKit Reporter: Basuke Suzuki <basuke>
Component: New BugsAssignee: Basuke Suzuki <basuke>
Status: RESOLVED FIXED    
Severity: Normal CC: ahmad.saleem792, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Basuke Suzuki
Reported 2026-01-14 13:50:34 PST
Currently SecurityOrigin::canShow(URL) method uses pathEnd() to check the maximum length of URL. It should be whole URL length including query string and hash.
Attachments
Basuke Suzuki
Comment 1 2026-01-14 13:51:45 PST
Basuke Suzuki
Comment 2 2026-01-14 13:53:26 PST
EWS
Comment 3 2026-01-18 11:16:46 PST
Committed 305780@main (c8e9806e77fa): <https://commits.webkit.org/305780@main> Reviewed commits have been landed. Closing PR #56587 and removing active labels.
Ahmad Saleem
Comment 4 2026-01-18 20:10:42 PST
This landed but bot didn't close it as `RESOLVED FIXED` so doing it manually.
Note You need to log in before you can comment on or make changes to this bug.