LibWeb: Disallow ASF in DOMMatrix constructor

Calme1709 · kalenikaliaksandr · commit 99dd648475e5 · 2025-09-28T17:43:25.000+02:00
We have no context to resolve ASFs against here so we should throw.
diff --git a/Libraries/LibWeb/Geometry/DOMMatrixReadOnly.cpp b/Libraries/LibWeb/Geometry/DOMMatrixReadOnly.cpp
@@ -950,7 +950,7 @@ WebIDL::ExceptionOr<ParsedMatrix> parse_dom_matrix_init_string(JS::Realm& realm,
     // The result will be a <transform-list>, the keyword none, or failure.
     // If parsedValue is failure, or any <transform-function> has <length> values without absolute length units, or any keyword other than none is used, then return failure. [CSS3-SYNTAX] [CSS3-TRANSFORMS]
     auto transform_style_value = parse_css_value(CSS::Parser::ParsingParams {}, transform_list, CSS::PropertyID::Transform);
-    if (!transform_style_value || (transform_style_value->is_keyword() && transform_style_value->to_keyword() != CSS::Keyword::None))
+    if (!transform_style_value || (transform_style_value->is_keyword() && transform_style_value->to_keyword() != CSS::Keyword::None) || transform_style_value->is_unresolved())
         return WebIDL::SyntaxError::create(realm, "Failed to parse CSS transform string."_utf16);
     auto parsed_value = CSS::ComputedProperties::transformations_for_style_value(*transform_style_value);
 
diff --git a/Tests/LibWeb/Text/expected/geometry/dommatrix-unresolved-style-value.txt b/Tests/LibWeb/Text/expected/geometry/dommatrix-unresolved-style-value.txt
@@ -0,0 +1 @@
+Pass!
diff --git a/Tests/LibWeb/Text/input/geometry/dommatrix-unresolved-style-value.html b/Tests/LibWeb/Text/input/geometry/dommatrix-unresolved-style-value.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+    <script src="../include.js"></script>
+    <script>
+        test(() => {
+            try {
+                new DOMMatrix("var(--a)");
+                println("Fail! Should throw error");
+            } catch {
+                println("Pass!");
+            }
+        });
+    </script>
+</html>
