February 2025 - webkit-dev - lists.webkit.org

InjectedBundle deprecation
by Alex Christensen 01 Aug '25

01 Aug '25

Hello WebKit developers! We are ramping up to do some serious work on Site Isolation which includes putting cross-origin iframes in a different process than the parent frame. Similar efforts have been done in other browser engines and some related work has already been done in WebKit, but not enough. This will do strange things to the InjectedBundle APIs, which have fundamental assumptions that the whole DOM is in one process and that communication only happens with one process at a time. We have never exposed InjectedBundle APIs as public API, but some other distributors of WebKit have. As we make progress on this project, we anticipate that anything in Source/WebKit/WebProcess/InjectedBundle/API is subject to deprecation and removal. This will also allow us to tighten the sandbox on the web process, resolve security and performance issues, and have cleaner code. Would the maintainers of the GTK and WPE APIs be willing to assist in migrating from those APIs and designing replacements in the UI process? Alex Christensen

5 17

Site isolation
by Alex Christensen 01 Aug '25

01 Aug '25

The SiteIsolation feature is beginning to work in the simplest of cases, but I had to do some work in the Source/WebKit/Shared/RemoteLayerTree directory, which is platform-specific. Basically all the use of LayerHostingContextIdentifier in that directory needs an equivalent implementation for other graphics implementations, like in the CoordinatedGraphics directories. There is one layout test in LayoutTests/http/tests/site-isolation/basic-iframe.html that is currently skipped on all non-Cocoa platforms. Is someone willing to collaborate to design and implement the feature in non-Cocoa ports? We are in the early stages of the project and have a long way to go, so I imagine things will continue to come up, like deciding how to implement event handling and other platform dependent features. Alex

3 6

Glib download API change request
by Alex Christensen 14 Mar '25

14 Mar '25

Since the introduction of WKDownload in 2020, I’ve been trying to make the download object creation process asynchronous in WebKit. With 290510@main I’ve removed the last caller of WebProcessPool::download from the Cocoa platform, but I noticed that the glib APIs have 3 places where a WebKitDownload* object is returned synchronously from an API call: webkit_web_context_download_uri, webkit_web_view_download_uri, and webkit_network_session_download_uri. Would the maintainers of these APIs be willing to deprecate and remove them in favor of an API design closer to WKWebView’s startDownloadUsingRequest:completionHandler:? That function is given a callback which asynchronously provides the download object to the API client. It would also be nice if webkit_download_cancel could be reshaped to look more like WKDownload.cancel: and stop using legacyDidCancel.

3 5

Rupin Mittal is now a reveiwer
by Ryosuke Niwa 27 Feb '25

27 Feb '25

Hi all, I’m delighted to announce that Rupin Mittal is now a WebKit reviewer. He has been doing work in storage and adoption of smart pointers. - R. Niwa

1 0

Nitin Mahendru is now a Reviewer
by John Wilander 24 Feb '25

24 Feb '25

Dear WebKittens, I’m happy to announce that Nitin Mahendru is now a WebKit Reviewer. He knows WebCrypto and Swift/C++ interop really well, and also has experience in WebAuthn. Congratulations, Nitin! Regards, John

1 0

Sosuke Suzuki is now a reviewer!
by Yusuke Suzuki 21 Feb '25

21 Feb '25

Hello WebKittens! I’m happy to announce that Sosuke Suzuki is now a WebKit Reviewer! Sosuke is an expert in JavaScriptCore, contributing to JavaScriptCore in various areas, including spec-compliance, runtime performance improvement, JIT compiler improvement, and so on! Congratulations, Sosuke! Best regards, -Yusuke Suzuki

1 0

Bugzilla spammers are changing tactics
by Michael Catanzaro 17 Feb '25

17 Feb '25

Hi, For a couple months now, Bugzilla spammers have changed tactics and are now leaving (possibly AI-generated?) comments without any obvious spam links, e.g.: https://bugs.webkit.org/show_bug.cgi?id=192753#c31 The spam comment will look somewhat related to the content of the bug report, but won't actually contribute to the discussion. The purpose of these spam comments is unclear since without links there can be no SEO spam. Maybe they think it helps them build reputation to avoid us removing their future comments that will actually include links? Whatever. This is a heads-up to be on the lookout for the new strange type of spam. What's the correct procedure to report spam? I had been mailing <admin(a)webkit.org> each time I see it, but there is also a spam tag we can add to posts to hide them. Is the spam tag adequate, or is that not good enough to actually ban the spammer? Michael

3 3

UI for commits.webkit.org!
by Brianna Fan 04 Feb '25

04 Feb '25

Hi all, commits.webkit.org <http://commits.webkit.org/> is now live with a new UI for interacting with WebKit's vast commit history! You can search and compare commits using any representation, enabling you to Convert between hash and identifier View the diff between two revisions Generate a commits.webkit.org/compare link and copy to clipboard And.. discover WebKit history (1@main) and see who owns fun numbers (234567@main)! We hope you enjoy these new features and please continue to reach out with any feedback :) Cheers, Brianna Fan

1 0