Fix window.history GC issue. Since the history object is not part of...

webkit/port/bindings/v8/v8_proxy.cpp

 // Copyright (c) 2008, Google Inc.
 // All rights reserved.
 //
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 // notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
@@ skipping 1805 matching lines @@
     case V8ClassIndex::DOMWINDOW: {
       v8::Local<v8::Signature> default_signature = v8::Signature::New(desc);
 
       desc->PrototypeTemplate()->SetNamedPropertyHandler(
           USE_NAMED_PROPERTY_GETTER(DOMWindow));
       desc->PrototypeTemplate()->SetIndexedPropertyHandler(
           USE_INDEXED_PROPERTY_GETTER(DOMWindow));
 
       desc->SetHiddenPrototype(true);
 
-      // Reserve spaces for references to location and navigator objects.
+      // Reserve spaces for references to location, history and
+      // navigator objects.
       v8::Local<v8::ObjectTemplate> instance_template =
           desc->InstanceTemplate();
       instance_template->SetInternalFieldCount(
           V8Custom::kDOMWindowInternalFieldCount);
 
       // Set access check callbacks, but turned off initially.
       // When a context is detached from a frame, turn on the access check.
       // Turning on checks also invalidates inline caches of the object.
       instance_template->SetAccessCheckCallbacks(
           V8Custom::v8DOMWindowNamedSecurityCheck,
@@ skipping 809 matching lines @@
 #undef MAKE_CASE
       default:
         ASSERT(false);
       }
       result = v8::Persistent<v8::Object>::New(v8obj);
       if (is_active_dom_object)
         SetJSWrapperForActiveDOMObject(imp, result);
       else
         SetJSWrapperForDOMObject(imp, result);
 
-      // Special case for Location and Navigator. Both Safari and FF let
-      // Location and Navigator JS wrappers survive GC. To mimic their
-      // behaviors, V8 creates hidden references from the DOMWindow to
-      // location and navigator objects. These references get cleared
-      // when the DOMWindow is reused by a new page.
-      if (type == V8ClassIndex::LOCATION) {
-        SetHiddenWindowReference(static_cast<Location*>(imp)->frame(),
-          V8Custom::kDOMWindowLocationIndex, result);
-      } else if (type == V8ClassIndex::NAVIGATOR) {
-        SetHiddenWindowReference(static_cast<Navigator*>(imp)->frame(),
-          V8Custom::kDOMWindowNavigatorIndex, result);
+      // Special case for non-node objects History, Location and
+      // Navigator. Both Safari and FF let Location and Navigator JS
+      // wrappers survive GC. To mimic their behaviors, V8 creates
+      // hidden references from the DOMWindow to these wrapper
+      // objects. These references get cleared when the DOMWindow is
+      // reused by a new page.
+      switch (type) {
+        case V8ClassIndex::HISTORY:
+          SetHiddenWindowReference(static_cast<History*>(imp)->frame(),
+                                   V8Custom::kDOMWindowHistoryIndex, result);
+          break;
+        case V8ClassIndex::NAVIGATOR:
+          SetHiddenWindowReference(static_cast<Navigator*>(imp)->frame(),
+                                   V8Custom::kDOMWindowNavigatorIndex, result);
+          break;
+        case V8ClassIndex::LOCATION:
+          SetHiddenWindowReference(static_cast<Location*>(imp)->frame(),
+                                   V8Custom::kDOMWindowLocationIndex, result);
+          break;
+        default:
+          break;
       }
     }
   }
   return result;
 }
 
 
 void V8Proxy::SetHiddenWindowReference(Frame* frame,
                                        const int internal_index,
                                        v8::Handle<v8::Object> jsobj)
@@ skipping 934 matching lines @@
 }
 
 void V8Proxy::RegisterExtension(v8::Extension* extension,
                                 const String& schemeRestriction) {
     v8::RegisterExtension(extension);
     V8ExtensionInfo info = {schemeRestriction, extension};
     m_extensions.push_back(info);
 }
 
 }  // namespace WebCore