131137 2014-04-02 16:17:20 -0700 Crash when a function is constructed with the string "})({" 2022-07-15 17:35:09 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Mac OS X 10.9 RESOLVED CONFIGURATION CHANGED P2 Normal --- 1 webkit-bugs webkit-unassigned ap erights ggaren oliver oldest_to_newest 996896 0 228440 webkit-bugs 2014-04-02 16:17:20 -0700 Created attachment 228440 A simple page that will crash the Safari web process. When using the Function constructor to create a function with the string "})({", the invoking process will crash. When using a string such as "})str({", an error is thrown instead. Changing it to "});str({" will again cause a crash. 1029212 1 erights 2014-08-14 14:18:34 -0700 Is this a duplicate of https://bugs.webkit.org/show_bug.cgi?id=106160 ? 1029226 2 erights 2014-08-14 14:49:30 -0700 See also https://groups.google.com/forum/#!topic/google-caja-discuss/KWRNYko_pQo 1757966 3 erights 2021-05-07 12:49:57 -0700 This is apparently a dup of a closed bug, as explained in a previous message. Should this be closed? 1884482 4 ap 2022-07-15 17:35:09 -0700 The test is gone, so one way or another, there is nothing to do. 228440 2014-04-02 16:17:20 -0700 2014-04-02 16:17:20 -0700 A simple page that will crash the Safari web process. url.txt text/plain 58 webkit-bugs aHR0cHM6Ly9kbC5kcm9wYm94dXNlcmNvbnRlbnQuY29tL3UvMTE5NjcvY3Jhc2hTYWZhcmkuaHRt bA==