[JSC] Proxy should be trapped if base value is primitive
Created attachment 409264 [details] Patch
Comment on attachment 409264 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=409264&action=review > Source/JavaScriptCore/runtime/JSCJSValue.cpp:188 > + ProxyObject* proxy = jsCast<ProxyObject*>(obj); auto to avoid repeating the same type name twice?
Committed r267348: <https://trac.webkit.org/changeset/267348>
Landed with the proposed change.
<rdar://problem/69319577>
Comment on attachment 409264 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=409264&action=review > Source/JavaScriptCore/ChangeLog:9 > + So, if proxy exists in the prototype chain for the primitive values (e.g. StringPrototype -> Proxy chain), While this patch nicely handles ProxyObject, other objects that override put() need special care as well. Please see https://bugs.webkit.org/show_bug.cgi?id=217916.