Bug 195748

Summary: Global "this" and bareword getter calls on window
Product: WebKit Reporter: Anne van Kesteren <annevk>
Component: BindingsAssignee: Nobody <webkit-unassigned>
Status: RESOLVED INVALID    
Severity: Normal CC: cdumez, rakuco
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=195562

Description Anne van Kesteren 2019-03-14 09:17:32 PDT
It seems that in Safari all calls go through the WindowProxy, except when srcdoc is involved? Very curious.

See https://github.com/web-platform-tests/wpt/pull/15769 for tests.
Comment 1 Anne van Kesteren 2019-03-16 02:17:54 PDT
This might not be a problem after all. I was hitting non-standard XSS protection.