[Webkit-unassigned] [Bug 81416] New: [V8] Wrong constructor/__proto__ when using frames

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=81416

           Summary: [V8] Wrong constructor/__proto__ when using frames
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: arv at chromium.org
                CC: japhet at chromium.org, antonm at chromium.org,
                    haraken at chromium.org


Created an attachment (id=132393)
 --> (https://bugs.webkit.org/attachment.cgi?id=132393&action=review)
Test case

Given a frame, the childNodes and classList inside that frame have the wrong constructor/__proto__. This doesn't happen for everything so I'm not sure yet where the bug is. It seems we get all the Node sub interfaces correct and all non nodes wrong.

See attached test case

I verified that this does not allow cross domain access.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.