DescriptionDisallow Object.observe calls on access-checked objects
We already disallowed observing the global proxy; now we also
disallow any observation of access-checked objects (regardless
of whether the access check would succeed or fail, since there's
not a good way to tell the embedder what kind of access is being
requested).
Also disallow Object.getNotifier for the same reasons.
BUG=chromium:531891
LOG=y
Committed: https://crrev.com/21bd4564538b43dec9ff8c70d43c77a4696e4cfb
Cr-Commit-Position: refs/heads/master@{#30774}
Patch Set 1 #Patch Set 2 : Add new error message and tests #
Messages
Total messages: 8 (2 generated)
|