Patch to follow.
This happens because methods on String.prototype should return string literal, not String object.
Created attachment 191936 [details] Patch
Comment on attachment 191936 [details] Patch Clearing flags on attachment: 191936 Committed r145048: <http://trac.webkit.org/changeset/145048>
All reviewed patches have been landed. Closing bug.