318408 2026-07-01 22:24:19 -0700 Digital Credentials: concurrent "wait" requests from separate processes can clobber WebPageProxy's single pending-handler slot under site isolation 2026-07-13 20:42:54 -0700 1 1 1 Unclassified WebKit WebDriver Safari 26 Unspecified Unspecified NEW InRadar P2 Normal --- 268516 1 marcosc webkit-unassigned bburg webkit-bug-importer oldest_to_newest 2226018 0 marcosc 2026-07-01 22:24:19 -0700 Under site isolation, a cross-origin subframe runs in its own WebProcess with its own WebCore::Page and CredentialRequestCoordinator. The concurrent-request guard in CredentialRequestCoordinator::prepareCredentialRequests only serializes requests within a single process (it checks that coordinator's InteractionState). Two cross-origin iframes in different processes therefore each pass their own guard and both dispatch ShowDigitalCredentialsChooser to the same WebPageProxy. WebPageProxy tracks a pending "wait"-parked request with a single slot (m_pendingDigitalCredentialsWaitContextID for the BiDi automation agent; internals().testingPendingDigitalCredentialHandler for WebKitTestRunner). When a second concurrent request arrives while one is parked, the slot is overwritten and the first request's parked completion handler is orphaned (never settled until session teardown). In debug builds this trips ASSERT(!m_pendingDigitalCredentialsWaitContextID) in WebPageProxy::showDigitalCredentialsChooser. This affects only automated testing of the Digital Credentials "wait"/virtual-wallet path across site-isolated cross-origin iframes; same-process requests are correctly serialized. 2226019 1 webkit-bug-importer 2026-07-01 22:24:24 -0700 <rdar://problem/181198108>