RESOLVED FIXED 241827
constructJSHTMLElement() should protect `document` and `elementInterface` 
https://bugs.webkit.org/show_bug.cgi?id=241827
Summary constructJSHTMLElement() should protect `document` and `elementInterface`
Alexey Shvayka
Reported 2022-06-21 16:01:47 PDT
...
Attachments
Add attachment proposed patch, testcase, etc.
Alexey Shvayka
Comment 1 2022-06-21 16:02:07 PDT
rdar://94610860
Alexey Shvayka
Comment 2 2022-06-21 16:06:37 PDT
Pull request: https://github.com/WebKit/WebKit/pull/1664
EWS
Comment 3 2022-06-21 17:16:19 PDT
Committed r295704 (251709@main): <https://commits.webkit.org/251709@main> Reviewed commits have been landed. Closing PR #1664 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.