Bug 248408

Summary:	Properly validate CSSMathValue unit for coords passed to CSSScale constructor
Product:	WebKit	Reporter:	Chris Dumez <cdumez>
Component:	CSS	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
Bug Depends on:
Bug Blocks:	175733

Description Chris Dumez 2022-11-28 10:32:26 PST

Properly validate CSSMathValue unit for coords passed to CSSScale constructor:
- https://drafts.css-houdini.org/css-typed-om/#dom-cssscale-cssscale

Comment 1 Chris Dumez 2022-11-28 10:33:53 PST

Pull request: https://github.com/WebKit/WebKit/pull/6868

Comment 2 EWS 2022-11-28 23:54:55 PST

Committed 257106@main (bfb893e2a4d4): <https://commits.webkit.org/257106@main>

Reviewed commits have been landed. Closing PR #6868 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2022-11-28 23:55:24 PST

<rdar://problem/102752268>