Keishi Hattori
4f990c0111
Automatic update from web-platform-tests [XSLT] Mitigate potential UAF in XSLStyleSheet::LoadChildSheets This CL mitigates UAF in XSLStyleSheet by adding liveness checks during child sheet loading. Synchronous recursive destruction could occur when a child sheet triggers an XSL transformation that frees the parent stylesheet's xmlDoc while it was still being iterated. Key changes: - Added checks for stylesheet_doc_taken_ in LoadChildSheets loop. - Added missing ClearResource() call in ProcessingInstruction when switching to a local stylesheet to prevent processing stale network responses. Bug: 496271580 Change-Id: Ib579489073a9e71dc9433307e3238db2939a14ba Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7702938 Reviewed-by: Mason Freed <masonf@chromium.org> Commit-Queue: Keishi Hattori <keishi@chromium.org> Cr-Commit-Position: refs/heads/main@{#1631070} -- wpt-commits: 9dd6be477b4de459eda502972a15c0b364cc2db4 wpt-pr: 59910