[Webkit-unassigned] [Bug 94518] New: Web Inspector: setting 'eval' breaks the debugger

Mon Aug 20 13:18:40 PDT 2012

https://bugs.webkit.org/show_bug.cgi?id=94518

           Summary: Web Inspector: setting 'eval' breaks the debugger
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: felix8a at gmail.com
                CC: timothy at apple.com, rik at webkit.org, keishi at webkit.org,
                    pmuellr at yahoo.com, joepeck at webkit.org,
                    pfeldman at chromium.org, yurys at chromium.org,
                    bweinstein at apple.com, apavlov at chromium.org,
                    loislo at chromium.org

If a script sets 'eval' to something other than eval, the debugger becomes pretty useless, there's no way to inspect any values.

This is a problem for people working in js sandboxes that disable eval, and possibly a problem for people trying to analyze malicious js.

<!doctype html>
<html>
<head>
<script>
  var e = 33;
  eval = 'thirty three';
  debugger;
</script>
</head>
</html>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.