[Webkit-unassigned] [Bug 27088] WebKit constructors use wrong global object/prototype chain

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 8 18:17:05 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27088





--- Comment #1 from Andrew Wilson <atwilson at google.com>  2009-07-08 18:17:05 PDT ---
Created an attachment (id=32496)
 --> (https://bugs.webkit.org/attachment.cgi?id=32496)
reduction that tests all global constructors and exposes this bug

Since the constructor code is looking at the lexical scope, it can be tricky to
reproduce this bug (for example, accessing parent.window.Image will show the
bug, but calling a function in the parent frame that accesses
parent.window.Image won't.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list