[Webkit-unassigned] [Bug 21138] New: DOM Constructors are being cached/looked up with the wrong global object

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21138

           Summary: DOM Constructors are being cached/looked up with the
                    wrong global object
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: sam at webkit.org


Our caching of constructor objects is based on the lexical global object at the
time of request rather than the object we're actually lifting these objects
off.  This means that it is impossible for windowa to directly retrieve a dom
constructor from windowb (see the attached testcase).


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.