RESOLVED FIXED309172
[Site Isolation] prepareForProvisionalLoadInProcess should guard against cancellation during network process's handling
https://bugs.webkit.org/show_bug.cgi?id=309172
Summary [Site Isolation] prepareForProvisionalLoadInProcess should guard against canc...
Qianlang Chen
Reported 2026-03-04 09:59:39 PST
Under site isolation, while the network process is handling the addAllowedFirstPartyForCookies message, the provisional loading could be cancelled already. When that handling finishes, we need to guard against that so its WebPageProxy doesn't later trigger WebPage::LoadRequest on a cancelled provisional frame Basically, when the completionHandler in [1] gets called, provisional loading could've already been cancelled, and LoadRequest should no longer be sent to that frame because it'd fail the assertion at [2] as the frame would've been unregistered already - [1]: https://github.com/WebKit/WebKit/blob/c1df92d228fc00d75c93f5a6adcd3e8bddb005b7/Source/WebKit/UIProcess/WebPageProxy.cpp#L5647 - [2]: https://github.com/WebKit/WebKit/blob/c1df92d228fc00d75c93f5a6adcd3e8bddb005b7/Source/WebKit/WebProcess/WebPage/WebPage.cpp#L2223 I'll add more details and/or relevant repro steps below
Attachments
Qianlang Chen
Comment 1 2026-03-04 11:37:14 PST
EWS
Comment 2 2026-03-05 10:40:56 PST
Committed 308729@main (077e5cdf8cb0): <https://commits.webkit.org/308729@main> Reviewed commits have been landed. Closing PR #59908 and removing active labels.
Radar WebKit Bug Importer
Comment 3 2026-03-05 10:41:12 PST
Note You need to log in before you can comment on or make changes to this bug.