[Webkit-unassigned] [Bug 195534] New: with(aProxy) {/*stuff*/} causes wrong traps

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=195534

            Bug ID: 195534
           Summary: with(aProxy) {/*stuff*/} causes wrong traps
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: erights at gmail.com

See https://github.com/tc39/proposal-realms/issues/200#issuecomment-471254838 and the enclosing thread. The traps seen
   * are surprising
   * violate the spec
   * differ from the behavior seen on chrome and firefox
   * are currently blocking the realms shim from working on safari/jsc

Once we understand these bugs we can probably modify the realms shim to work and maintain security despite these bugs. But until we understand these bugs, we cannot be confident that even the current realms shim maintains security. We need to know how the with-on-a-proxy trapping behavior differs from the spec. Thanks.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190310/d50a8cdd/attachment.html>