Comment #2 on issue 1283 by [email protected]: Constructed objects don't get their constructor property whitelisted.
http://code.google.com/p/google-caja/issues/detail?id=1283

From the contents of http://codereview.appspot.com/2543041/ I think there may be a misunderstanding about where the "constructor" property comes from. It is not the act of constructing an object that gives anything a "constructor" property. Rather, when a function is created, it is automagically endowed with a "prototype" property pointing at a fresh object whose "constructor" property points back at it.


function f() {}
f.prototype.constructor === f
true


Reply via email to