[Webkit-unassigned] [Bug 231506] Investigate `JSGlobalObject == JSDOMGlobalObject` WebCore assumption in presence of Shadow Realms

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Oct 25 10:54:00 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=231506

--- Comment #2 from Phillip Mates <pmates at igalia.com> ---
Yusuke, you raised this initially. Looking at `incumbentDOMWindow`, it doesn't seem to be used in api contexts that the shadow realm has access to. For example, in the derived JSDOMWindow.cpp, `incumbentDOMWindow` is used for `postMessage`, `closeBody`, `focusBody`, etc, which won't be exposed to the shadow realm global object.

Can you think of other areas we need to look out for, or perhaps this assumption isn't an issue?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211025/c17619f4/attachment-0001.htm>


More information about the webkit-unassigned mailing list