Comment #6 on issue 1283 by metaweta: Constructed objects don't get their constructor property whitelisted.
http://code.google.com/p/google-caja/issues/detail?id=1283

But that means (new f).constructor isn't visible unless someone has looked at a property of f. So I guess we have two options:

1. Whitelist constructor on every object
2. Whitelist f.prototype.constructor in markFunc. That would be sad--I was trying to keep that operation cheap by using the deferral trick. Since we know that f.prototype is brand new, however, we can avoid a lot of the logic and simply set the eight internal properties.



Reply via email to