[Webkit-unassigned] [Bug 146785] toJSDOMWindow() does not handle objects that descend from the JS DOM Window (crashes on use)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=146785

--- Comment #18 from Darin Adler <darin at apple.com> ---
I’m suggesting we create some tests demonstrating the same issue on other DOM elements; I don’t think it was good to fix this only for the DOM window given the same issue exists for everything! Once we have some tests I’m sure we can quickly fix the problem.

The name of the function is not the important issue, despite the fact that it was the first thing I commented on.

If you’d like to make those tests, I would be grateful, but if not someone else contributing to WebKit should do it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150727/da2e10c2/attachment-0001.html>