[Webkit-unassigned] [Bug 8355] New: window object's prototype does not persist in back/forward cache

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=8355

           Summary: window object's prototype does not persist in
                    back/forward cache
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.0
            Status: NEW
          Severity: normal
          Priority: P2
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ggaren at apple.com


window.__proto__.x = 1;

navigate to another page

hit 'back'

window.__proto__.x = undefined!

Frame.cpp saveWindowProperties and restoreWindowProperties need to save and
restore not only the property map but also the prototype chain. One simple way
would be to add a __proto__ member to the property map before saving it.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.