Don't expose Array.prototype.values as it breaks webcompat

src/array-iterator.js

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 'use strict';
 
 
 // This file relies on the fact that the following declaration has been made
 // in runtime.js:
 // var $Array = global.Array;
@@ skipping 102 matching lines @@
   %AddNamedProperty(ArrayIterator.prototype, symbolIterator,
                     ArrayIteratorIterator, DONT_ENUM);
 }
 SetUpArrayIterator();
 
 
 function ExtendArrayPrototype() {
   %CheckIsBootstrapping();
 
   InstallFunctions($Array.prototype, DONT_ENUM, $Array(
+    // No 'values' since it breaks webcompat: http://crbug.com/409858
     'entries', ArrayEntries,
-    'values', ArrayValues,
     'keys', ArrayKeys
   ));
 
   %AddNamedProperty($Array.prototype, symbolIterator, ArrayValues, DONT_ENUM);
 }
 ExtendArrayPrototype();
 
 
 function ExtendTypedArrayPrototypes() {
   %CheckIsBootstrapping();
@@ skipping 13 matching lines @@
 macro EXTEND_TYPED_ARRAY(NAME)
   %AddNamedProperty($NAME.prototype, 'entries', ArrayEntries, DONT_ENUM);
   %AddNamedProperty($NAME.prototype, 'values', ArrayValues, DONT_ENUM);
   %AddNamedProperty($NAME.prototype, 'keys', ArrayKeys, DONT_ENUM);
   %AddNamedProperty($NAME.prototype, symbolIterator, ArrayValues, DONT_ENUM);
 endmacro
 
   TYPED_ARRAYS(EXTEND_TYPED_ARRAY)
 }
 ExtendTypedArrayPrototypes();