[Webkit-unassigned] [Bug 118139] NodeList allows element IDs to override standard DOM accessor

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=118139


Andreas Kling <akling at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ggaren at apple.com,
                   |                            |mhahnenberg at apple.com




--- Comment #2 from Andreas Kling <akling at apple.com>  2014-07-01 12:30:37 PST ---
Looks like the issue here is that item() is on NodeList's prototype, so by overriding "item" on an instance of NodeList, we choose that instead of looking into the prototype chain.

I think the fix here is to let the prototype chain take precedence over named getters.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.