| Summary: | FunctionProtoFunc::callAsFunction uses the wrong global object as 'this' in the apply case | ||||||
|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Geoffrey Garen <ggaren> | ||||
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> | ||||
| Status: | RESOLVED DUPLICATE | ||||||
| Severity: | Normal | CC: | ap, barraclough, ddkilzer, jwalden+bwo, oliver, sam | ||||
| Priority: | P2 | Keywords: | InRadar | ||||
| Version: | 420+ | ||||||
| Hardware: | Mac | ||||||
| OS: | OS X 10.4 | ||||||
| Attachments: |
|
||||||
|
Description
Geoffrey Garen
2006-12-19 16:05:19 PST
Created attachment 11925 [details]
reduction
We should probably analyze what we use for the global object in other cases, as well. You have to open the reduction locally, to avoid a JavaScript security exception. See bug 11885. I think bug 7831 is specifically about eval.apply, and not about apply in general, or multiple global objects. It's possible that fixing one may fix the other, though. Sam, this page succeeds in ffx3, but fails with a security check failure in ToT We have different rules than Firefox regarding data: urls (we are much more strict). It doesn't seem like that is what this test is really testing though. To do the real test, just put the content from the data: url into its own file. |