Bug 306987

Summary:	Fix WebLocalFrameLoaderClient allows sending requests to remote frames
Product:	WebKit	Reporter:	ccarley2
Component:	WebKit Misc.	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

ccarley2

Reported 2026-02-04 14:14:31 PST

WebLocalFrameLoaderClient::dispatchWillSendRequest allows sending requests to remote frames, which can cause a crash while trying to access local frame specific functionality. The injectedBundleResourceLoadClient assumes the frame will be local

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2026-02-04 14:14:38 PST

<rdar://problem/169652883>

ccarley2

Comment 2 2026-02-04 14:20:07 PST

Pull request: https://github.com/WebKit/WebKit/pull/57885

EWS

Comment 3 2026-02-06 02:22:06 PST

Committed 306927@main (0f2bfc5f793e): <https://commits.webkit.org/306927@main> Reviewed commits have been landed. Closing PR #57885 and removing active labels.

Note You need to log in before you can comment on or make changes to this bug.