[Webkit-unassigned] [Bug 25079] iframe sandboxed native's methods return document natives.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 30 07:32:29 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=25079





--- Comment #5 from Adam Barth <abarth at webkit.org>  2010-07-30 07:32:29 PST ---
Ok.  I understand now.  Your test case is about 10x more complex than it needs to be.  The issue is that object created via constructors are getting their prototypes from the current page whereas they should be getting their prototypes from the page that contained the constructors originally.  In the test case, the page that contains the constructors is detached, but it's unclear whether that's essentially to the issue.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list