Prevent extensions from clobbering JSON implementation that extension calls use

chrome/renderer/resources/event_bindings.js

Index: chrome/renderer/resources/event_bindings.js
diff --git a/chrome/renderer/resources/event_bindings.js b/chrome/renderer/resources/event_bindings.js
index aaea01c13c62ac3d406c2fed404ca9c97be01697..4fa1309fc5451480fb3996f329bbed71c06da9cf 100644
--- a/chrome/renderer/resources/event_bindings.js
+++ b/chrome/renderer/resources/event_bindings.js
@@ -9,6 +9,40 @@ var chrome = chrome || {};
   native function DetachEvent(eventName);
 
   var chromeHidden = GetChromeHidden();
+  
+  // Local implementation of JSON.parse & JSON.stringify that protect us
+  // from being clobbered by an extension.
+  chromeHidden.JSON = new (function() {

[arv (Not doing code reviews), 2010/06/01 21:38:22]

I don't really see the point for the "new (function() {" syntax here but if you
find it easier then it is all good.

const $Object = ...;
...

chromeHidden.JSON = {
  stringify: ...,
  parse: ...
};

+    const $Object = Object;
+    const $Array = Array;
+    const $jsonStringify = JSON.stringify;
+    const $jsonParse = JSON.parse;
+
+    this.stringify = function(thing) {
+      var customizedObjectToJSON = $Object.prototype.toJSON;
+      var customizedArrayToJSON = $Array.prototype.toJSON;
+      if (customizedObjectToJSON !== undefined) {
+        $Object.prototype.toJSON = null;
+      }
+      if (customizedArrayToJSON !== undefined) {
+        $Array.prototype.toJSON = null;
+      }
+      try {
+        return $jsonStringify(thing);
+      } finally {
+        if (customizedObjectToJSON !== undefined) {
+          $Object.prototype.toJSON = customizedObjectToJSON;
+        }
+        if (customizedArrayToJSON !== undefined) {
+          $Array.prototype.toJSON = customizedArrayToJSON;
+        }
+      }
+    };
+
+    this.parse = function(thing) {
+      return $jsonParse(thing);
+    };
+  })();
 
   // Event object.  If opt_eventName is provided, this object represents
   // the unique instance of that named event, and dispatching an event
@@ -53,7 +87,7 @@ var chrome = chrome || {};
   chromeHidden.Event.dispatchJSON = function(name, args) {
     if (attachedNamedEvents[name]) {
       if (args) {
-        args = JSON.parse(args);
+        args = chromeHidden.JSON.parse(args);
       }
       return attachedNamedEvents[name].dispatch.apply(
           attachedNamedEvents[name], args);