[webkit-dev] Site isolation

Alex Christensen achristensen at apple.com
Thu Jul 31 11:50:24 PDT 2025


Right now most of our automated test coverage is from platform-specific API tests in SiteIsolation.mm, but there’s no reason why most of them couldn’t be translated to a platform-agnostic form.  We also have a decent amount of tests in http/tests/site-isolation and one in http/tests/contentextensions/cross-origin-content-rules.html.  There’s also run-webkit-tests --site-isolation that runs a test in a cross-site iframe with site isolation on and off and compares the output.

I’ve been working to keep as much of the site isolation implementation as possible in code that runs the same in all platforms, but drawing and compositing from different processes needs to be implemented by someone who knows the Linux drawing code better than I do.

> On Jul 31, 2025, at 5:05 AM, Carlos Garcia Campos <cgarcia at igalia.com> wrote:
> 
> El mar, 29-07-2025 a las 17:32 -0700, Alex Christensen via webkit-dev
> escribió:
>> About two years have passed, and I haven’t seen any progress on site
>> isolation on non-Cocoa platforms.  Is there anyone planning to
>> implement such support?
>> 
> 
> Yes, we are interested in implement it for WPE and GTK ports, but we
> don't really know how much effort it is. What's the current status of
> the feature in Cocoa ports? How much platform specific code is required
> to support it? Are there cross-platform layout or API test?
> 
>>> On Apr 15, 2023, at 3:24 AM, Fujii Hironori via webkit-dev
>>> <webkit-dev at lists.webkit.org> wrote:
>>> 
>>> I created a pull request of the initial
>>> support. https://github.com/WebKit/WebKit/pull/12723
>>> 
>>> BTW, It'd be nice if you have a design document, and a tracking
>>> bug.
>>> 
>>> 
>>> 2023年3月31日(金) 午前5:16 Fujii Hironori <fujii.hironori at gmail.com>:
>>>> Windows port is using GPU process for DOM rendering and layer
>>>> compositing.
>>>> I will do the Windows part of the task.
>>>> 
>>>> On Fri, Mar 31, 2023 at 4:43 AM Alex Christensen via webkit-dev
>>>> <webkit-dev at lists.webkit.org> wrote:
>>>>> The SiteIsolation feature is beginning to work in the simplest
>>>>> of cases, but I had to do some work in the
>>>>> Source/WebKit/Shared/RemoteLayerTree directory, which is
>>>>> platform-specific.  Basically all the use of
>>>>> LayerHostingContextIdentifier in that directory needs an
>>>>> equivalent implementation for other graphics implementations,
>>>>> like in the CoordinatedGraphics directories.  There is one
>>>>> layout test in LayoutTests/http/tests/site-isolation/basic-
>>>>> iframe.html that is currently skipped on all non-Cocoa
>>>>> platforms.
>>>>> 
>>>>> Is someone willing to collaborate to design and implement the
>>>>> feature in non-Cocoa ports?  We are in the early stages of the
>>>>> project and have a long way to go, so I imagine things will
>>>>> continue to come up, like deciding how to implement event
>>>>> handling and other platform dependent features.
>>>>> 
>>>>> Alex
>>>>> _______________________________________________
>>>>> webkit-dev mailing list
>>>>> webkit-dev at lists.webkit.org
>>>>> https://lists.webkit.org/mailman/listinfo/webkit-dev
>>> _______________________________________________
>>> webkit-dev mailing list
>>> webkit-dev at lists.webkit.org
>>> https://lists.webkit.org/mailman/listinfo/webkit-dev
>> 
>> _______________________________________________
>> webkit-dev mailing list
>> webkit-dev at lists.webkit.org <mailto:webkit-dev at lists.webkit.org>
>> https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> -- 
> Carlos Garcia Campos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-dev/attachments/20250731/63df7ff7/attachment-0001.htm>


More information about the webkit-dev mailing list