Sat, 03 Jan 2015 20:18:00 +0100
Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.
1 function C() {
2 this.m = function () {}; // JSOP_SETMETHOD
3 }
5 var a = [new C, new C, new C, new C, new C, new C, new C, new C, new C];
6 var b = [new C, new C, new C, new C, new C, new C, a[8], new C, new C];
8 var thrown = 'none';
9 try {
10 for (var i = 0; i < 9; i++) {
11 a[i].m();
12 b[i].m = 0.7; // MethodWriteBarrier required here
13 }
14 } catch (exc) {
15 thrown = exc.name;
16 }
17 assertEq(thrown, 'TypeError');