[Webkit-unassigned] [Bug 21142] New: Inspector needs a way to enumerate properties without side effects

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21142

           Summary: Inspector needs a way to enumerate properties without
                    side effects
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: timothy at hatcher.name, ggaren at apple.com


I noticed this while looking at an XSS issue, and finding that the console was
getting filled with security errors

in the console do:
a = {get foo(){console.log("wibble");}} <enter>
a.<tab repeatedly>

watch as the console fills with output (or at least increases the log count for
wibble)


I'm not sure exactly what the inspector is doing here, but it needs a side
effect free way to enumerate properties, and a way to distinguish those
properties that can be subsequently accessed without side effects from those
that cannot.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.