Bug 248328

Summary: [WebIDL] Hoist protectedThis reference in JSEventListener::handleEvent()
Product: WebKit Reporter: Alexey Shvayka <ashvayka>
Component: BindingsAssignee: Alexey Shvayka <ashvayka>
Status: RESOLVED FIXED    
Severity: Enhancement CC: cdumez, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: All   
OS: All   
See Also: https://github.com/web-platform-tests/wpt/pull/37170

Description Alexey Shvayka 2022-11-24 18:02:17 PST 
Theoretically jsFunction->get() may remove currently executing event listener.
Comment 1 Radar WebKit Bug Importer 2022-11-24 18:10:43 PST 
<rdar://problem/102654520>
Comment 2 Alexey Shvayka 2022-11-24 18:12:08 PST 
Pull request: https://github.com/WebKit/WebKit/pull/6800
Comment 3 EWS 2022-11-25 15:16:23 PST 
Committed 257027@main (a8c7d4f465b1): <https://commits.webkit.org/257027@main>

Reviewed commits have been landed. Closing PR #6800 and removing active labels.