[Webkit-unassigned] [Bug 231506] Investigate `JSGlobalObject == JSDOMGlobalObject` WebCore assumption in presence of Shadow Realms

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Oct 25 12:02:25 PDT 2021


https://bugs.webkit.org/show_bug.cgi?id=231506

--- Comment #3 from Yusuke Suzuki <ysuzuki at apple.com> ---
(In reply to Phillip Mates from comment #2)
> Yusuke, you raised this initially. Looking at `incumbentDOMWindow`, it
> doesn't seem to be used in api contexts that the shadow realm has access to.
> For example, in the derived JSDOMWindow.cpp, `incumbentDOMWindow` is used
> for `postMessage`, `closeBody`, `focusBody`, etc, which won't be exposed to
> the shadow realm global object.
> 
> Can you think of other areas we need to look out for, or perhaps this
> assumption isn't an issue?

What happens if you pass these functions to ShadowRealm and calling it inside ShadowRealm's user function?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211025/76db7bcd/attachment.htm>


More information about the webkit-unassigned mailing list