[Webkit-unassigned] [Bug 51097] Primordial privilege escalation from bad this-coercion

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=51097





--- Comment #2 from Mark S. Miller <erights at gmail.com>  2011-04-23 19:06:08 PST ---
Created an attachment (id=90865)
 --> (https://bugs.webkit.org/attachment.cgi?id=90865&action=review)
'valueOf()' in a script tag still does bad this coercion

The attachment should alert 'ok' and does so correctly on FF4. On Safari Version 5.0.4 (5533.20.27, r84622) it alerts 'bad value: [object DOMWindow]' instead. Should this case be reported as part of this bug 51097, or should I file a distinct bug?

See https://bugzilla.mozilla.org/show_bug.cgi?id=652375

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.