This is a bug introduced by https://bugs.webkit.org/show_bug.cgi?id=71933, isVariableObject() checks were excluding StaticScopeObjects, this patch inadvertently changed them to be included.
<rdar://problem/10697118>
Created attachment 125938 [details] Fix
Comment on attachment 125938 [details] Fix View in context: https://bugs.webkit.org/attachment.cgi?id=125938&action=review > Source/JavaScriptCore/ChangeLog:8 > + Problem URL is: http://www.rickshawbags.com/customize/custom-bag#!thl=rickshaw/bag() Can we make an automated regression test out of this?
(In reply to comment #3) > Can we make an automated regression test out of this? Good question – I don't yet know. This patch just reverts an undesired change in behavior, I'm still investigating exactly why this change resulted in the bug that it did. Fixed in r106999.