Constructor callbacks are currently exposed to V8 by V8DOMWrapper::getTemplate(), which calls v8::FunctionTemplate::SetCallHandler() with a reference to the callback function. The call to SetCallHandler should be in the generated bindings if possible.
This was fixed as a part of 33680. *** This bug has been marked as a duplicate of bug 33680 ***