[Webkit-unassigned] [Bug 203560] [[HasProperty]] result of Proxy in prototype chain is ignored

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Nov 30 17:00:20 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=203560

--- Comment #17 from Saam Barati <sbarati at apple.com> ---
Comment on attachment 383041
  --> https://bugs.webkit.org/attachment.cgi?id=383041
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=383041&action=review

> Source/JavaScriptCore/runtime/JSObjectInlines.h:129
> +        if (object->type() == ProxyObjectType && slot.internalMethodType() == PropertySlot::InternalMethodType::HasProperty)

What about when it’s not in the prototype chain though? What if the proxy is the base?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191201/be55711c/attachment-0001.htm>


More information about the webkit-unassigned mailing list