[Webkit-unassigned] [Bug 206445] window proxy of detached iframe doesn't respect updates to global values

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri May 29 14:51:06 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=206445

--- Comment #3 from Chris Dumez <cdumez at apple.com> ---
A simpler way to write this:

<html>
<body>
<script>
    const iframe = document.createElement('iframe');
    document.body.appendChild(iframe);
    const iframeEval = iframe.contentWindow.eval;

    iframeEval(`
        log = top.console.log;
        foo = 1
    `);
    iframe.remove();
    iframeEval(`
        foo++;
        if (foo !== 2) {
            log('fails!');
        } else {
            log('works!');
        }
    `);
</script>
</body>
</html>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200529/ae685a10/attachment.htm>


More information about the webkit-unassigned mailing list