WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
311362
[Site Isolation] Cross-site redirect in <object> subframe causes parent page to complete prematurely
https://bugs.webkit.org/show_bug.cgi?id=311362
Summary
[Site Isolation] Cross-site redirect in <object> subframe causes parent page ...
roberto_rodriguez2
Reported
2026-04-02 12:21:31 PDT
When an <object type="text/html"> element's load is redirected to a different site with site isolation enabled, the parent page fires its load event before the redirected content loads in the new process. The child frame's error handling path does not distinguish between a real failure and a process-swap cancellation, so the child frame is marked complete and the <object> element renders fallback content instead of waiting for the cross-process load to finish.
Attachments
Add attachment
proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1
2026-04-02 12:21:38 PDT
<
rdar://problem/173954545
>
roberto_rodriguez2
Comment 2
2026-04-02 12:28:24 PDT
Pull request:
https://github.com/WebKit/WebKit/pull/61927
EWS
Comment 3
2026-04-03 21:57:44 PDT
Committed
310557@main
(534d9836c83d): <
https://commits.webkit.org/310557@main
> Reviewed commits have been landed. Closing PR #61927 and removing active labels.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug