Framework
WebKit is Apple's open-source browser engine, powering Safari and other apps by rendering web content, executing JavaScript, and enforcing page security.
Deno 2.9, released June 25, 2026, added an experimental deno desktop command that compiles a web app into a single binary. The default backend bundles no browser engine, so rendering follows WebView2 or WebKit. Bundling Chromium is a flag away, at tens of megabytes.
Reality
Apple has launched a "Switch to Safari" campaign urging Mac users to drop Chrome, with a web page listing more than 10 reasons. Its speed and battery figures are Apple's own "up to" claims, and the coverage shows no change in Mac browser share.
Perspective Coverage
3 publishersReality
Portrait MP4 clips decoded with mp4box.js and VideoDecoder came out 1920x1080 and sideways in Chromium, Chrome, Firefox and WebKit, a dev.to post reports. The rotation lives in the track header matrix that the demuxer exposes, so the app has to read it and turn the canvas itself.
Reality
Safari Technology Preview 254 fixes four accessibility bugs and two animation bugs, among them VoiceOver announcing every focused ARIA menu item as selected. Teams carrying workarounds for any of them now have a build to test their removal against.
Reality
Apple's iOS 27 blocks calls to adtech domains run by The Trade Desk, ID5, LiveRamp, Permutive and Audigent, stopping some iPhone web ads from serving at all. Marketers heading into the holiday quarter can now lose the ad impression on iPhones as well as the ability to target it.
Reality
PNG-8 at 124 colors encoded a red-text test poster in 48,481 bytes at an edge error of 0.13 Delta E, smaller and cleaner than every JPEG export. For flat graphics like this one, an export tool that converts everything to JPEG ships bigger files with dirtier red text.
Reality
Chromium 149 canvas JPEGs grew 2.25x from quality 0.80 to 0.99 while red-text edge error fell only from 8.11 to 6.35, one developer measured. Firefox drops chroma subsampling at a lower setting, so the reviewer's browser decides whether the fringe shows.
Reality
Attacker server logs show the Coruna iOS WebKit kit compromising a live iPhone's browser in six seconds, two months after Google published its teardown. It fired with no tap from the user, on a phone still running iOS 15.8.3.
Reality
iOS 26.6.1, iPadOS 26.6.1 and macOS Tahoe 26.6.2 close 29 flaws with no known attacks. Publication is the trigger event, and 21 of the 29 sit in WebKit.
Perspective Coverage
3 publishersReality
Two accessibility name calculation bugs and six animation timeline bugs are resolved in WebKit's latest preview build, including scroll-timeline-name matching across shadow boundaries and a removal of three margin-trim values.
Reality
The new WebKit preview matches style-originated scroll timelines globally, so a declaration no longer has to sit in the animated element's tree. Four of the seven animation entries in the notes settle which timeline a target resolves to.
Reality
Blockchain security firm SlowMist says an active exploit chain walks from a Safari page to kernel access and the iOS Keychain on everything from iOS 13 to 26.5, while Apple's patches, by the same account, reach 26.3.
Reality
Apple deprecated WKProcessPool in macOS 12 and it no longer affects process sharing, so the data store object you hand a web view is what now determines whether two tabs share WebKit's network and content processes.
Reality
Apple's new Safari MCP server gives Claude Code or Codex the DOM, screenshots and console output of whatever the browser window is rendering. It stays off until a developer turns on two separate settings.
Reality
A single test on a Display P3 photo found the stripped copy looked duller with every pixel value unchanged, and re-saving at quality 100 recovered nothing; the frame mean moved under 3 ΔE while the most saturated pixels moved 5.4.
Reality
Apple's September 14 releases close 273 unique vulnerabilities across ten advisories, with no exploitation reported. Fleet managers have to pick which lane to patch on, and the 26.7 build leaves out about 56 of the fixes that ship in iOS 27.
Reality
One converted iPhone photo decoded in Playwright's WebKit and failed in Chromium and Firefox. A three-line createImageBitmap call tells an upload component which case it has before it draws the box.
Reality
Safari's loader took its host hooks from a proposal last updated in January 2016, which is why the top-level await bugs survived years of patching, and why the rewrite only helps traffic already on Safari 27.
Reality
Apple's WebKit team is taking Interop 2027 proposals now, and the entry rules filter harder than the final selection does, because a gap needs a stable standard and Web Platform Test coverage before anyone weighs how much it hurts.
Reality
The per-tab figures were summed off an unfiltered ps listing, so a browser policy that looked 198 MB ahead was really 91 MB behind. What caught it was watching one number fail to move across a page load.
Reality
Security · September 1, 2026 · Confirmed2 publishers