[Webkit-unassigned] [Bug 27088] WebKit constructors use wrong global object/prototype chain

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 22 00:37:53 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27088





--- Comment #9 from Eric Seidel <eric at webkit.org>  2009-07-22 00:37:52 PDT ---
(From update of attachment 33233)
This has a few possible functional changes which could be tested (and/or
separated out from this patch):
window.history.constructor
window.location.constructor
document.location.__proto__
document.forms.name.__proto__
(new RGBColor).__proto__
instanceof JSSharedWorkerConstructor

all .constructor accesses could be fixed (although most won't be due to toJS
not yet passing enough information)

all autogenerated constructors could have changed instanceof's

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list