RESOLVED FIXED305505
Use URL's whole length instead of pathEnd() for URL size checks. 
https://bugs.webkit.org/show_bug.cgi?id=305505
Summary Use URL's whole length instead of pathEnd() for URL size checks.
Basuke Suzuki
Reported 2026-01-14 13:50:34 PST
Currently SecurityOrigin::canShow(URL) method uses pathEnd() to check the maximum length of URL. It should be whole URL length including query string and hash.
Attachments
Add attachment proposed patch, testcase, etc.
Basuke Suzuki
Comment 1 2026-01-14 13:51:45 PST
rdar://165801515
Basuke Suzuki
Comment 2 2026-01-14 13:53:26 PST
Pull request: https://github.com/WebKit/WebKit/pull/56587
EWS
Comment 3 2026-01-18 11:16:46 PST
Committed 305780@main (c8e9806e77fa): <https://commits.webkit.org/305780@main> Reviewed commits have been landed. Closing PR #56587 and removing active labels.
Ahmad Saleem
Comment 4 2026-01-18 20:10:42 PST
This landed but bot didn't close it as `RESOLVED FIXED` so doing it manually.
Note You need to log in before you can comment on or make changes to this bug.