[Webkit-unassigned] [Bug 29031] [v8] speed up access to windows impl from various methods

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=29031


Adam Barth <abarth at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |abarth at webkit.org




--- Comment #5 from Adam Barth <abarth at webkit.org>  2009-09-08 08:02:51 PDT ---
Can you add the following test case:

Evil window creates an iframe to honest domain.  Evil window then sets its
__proto__ to the iframe's window object.  Now, try to access properties that
are normally on the WindowPrototype and see if you get the wrong answers w.r.t.
security.

It might be ok.  I'll have to think about it more, but we should have the test
case in any event.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.