[Webkit-unassigned] [Bug 206445] New: window proxy of detached iframe doesn't respect updates to global values

Fri Jan 17 14:55:47 PST 2020

https://bugs.webkit.org/show_bug.cgi?id=206445

            Bug ID: 206445
           Summary: window proxy of detached iframe doesn't respect
                    updates to global values
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: john.david.dalton at gmail.com

<html>
<head>
</head>
<body>
<script>
    const iframe = document.createElement('iframe');
    document.body.appendChild(iframe);
    const { contentWindow: { eval: iframeEval } } = iframe;

    iframeEval(`
        log = top.console.log;
        foo = 1
    `);
    iframe.remove();
    iframeEval(`
        foo++;
        if (foo !== 2) {
            log('fails!');
        } else {
            log('works!');
        }
    `);
</script>
</body>
</html>

Logs "fails!" in Safari but works in Chrome and Firefox:
See https://output.jsbin.com/yuzeyup/1/

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200117/52f2a716/attachment.htm>