Bug 305876

Summary: Block fetch and XHR requests coming from tainted scripts
Product: WebKit Reporter: Charlie Wolfe <charliew>
Component: WebKit Misc.Assignee: Charlie Wolfe <charliew>
Status: RESOLVED FIXED    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Charlie Wolfe
Reported 2026-01-20 15:38:32 PST
...
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2026-01-20 15:38:40 PST
<rdar://problem/168542075>
Charlie Wolfe
Comment 2 2026-01-20 15:39:25 PST
Pull request: https://github.com/WebKit/WebKit/pull/56932
EWS
Comment 3 2026-01-21 12:41:47 PST
Committed 305956@main (67f6b8d3867e): <https://commits.webkit.org/305956@main> Reviewed commits have been landed. Closing PR #56932 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.