Visitar URL original
fix: don't crash when the Touch ID WebAuthn prompt reason is empty by trop[bot] · Pull Request #53195 · electron/electron · GitHub
Skip to content

fix: don't crash when the Touch ID WebAuthn prompt reason is empty - #53195

Merged
MarshallOfSound merged 3 commits into
43-x-yfrom
trop/43-x-y-bp-fix-don-t-crash-when-the-touch-id-webauthn-prompt-reason-is-empty-1787723566446
Aug 26, 2026
Merged

MarshallOfSound merged 3 commits into
43-x-yfrom
trop/43-x-y-bp-fix-don-t-crash-when-the-touch-id-webauthn-prompt-reason-is-empty-1787723566446

Conversation

@trop

@trop trop Bot commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Backport of #53185

See that PR for details.

Notes: Fixed a crash on macOS when a WebAuthn Touch ID prompt was requested while no locale resources were loaded.

trop Bot and others added 2 commits August 26, 2026 05:52
On macOS, -[LAContext evaluateAccessControl:operation:localizedReason:reply:]
raises NSInvalidArgumentException ("Non-empty localizedReason must be
provided.") when given an empty reason, and AppKit's uncaught-exception
handler then terminates the browser process. The reason comes from the
localized IDS_WEBAUTHN_TOUCH_ID_PROMPT_REASON string, which ResourceBundle
returns as an empty string when no locale pak was loaded (for example when
--lang names a locale that does not ship), so any WebAuthn request that
needed user verification crashed the app instead of prompting.

Add a Chromium patch that falls back to an unlocalized
"verify your identity on <rp id>" when the localized template is empty,
so the Touch ID prompt is shown rather than the process killed.

Co-authored-by: Samuel Attard <sattard@anthropic.com>
Co-authored-by: Samuel Attard <sattard@anthropic.com>
@trop
trop Bot requested a review from a team as a code owner August 26, 2026 05:53
@trop
trop Bot requested a review from MarshallOfSound August 26, 2026 05:53
@trop trop Bot added 43-x-y backport This is a backport PR semver/patch backwards-compatible bug fixes labels Aug 26, 2026
@MarshallOfSound
MarshallOfSound enabled auto-merge (squash) August 26, 2026 05:53
@MarshallOfSound
MarshallOfSound merged commit 5750920 into 43-x-y Aug 26, 2026
76 checks passed
@MarshallOfSound
MarshallOfSound deleted the trop/43-x-y-bp-fix-don-t-crash-when-the-touch-id-webauthn-prompt-reason-is-empty-1787723566446 branch August 26, 2026 13:50
@release-clerk

release-clerk Bot commented Aug 26, 2026

Copy link
Copy Markdown

Release Notes Persisted

Fixed a crash on macOS when a WebAuthn Touch ID prompt was requested while no locale resources were loaded.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

43-x-y backport This is a backport PR semver/patch backwards-compatible bug fixes

Projects

No open projects
Status: No status

Development

Successfully merging this pull request may close these issues.

3 participants