Comment #1 on issue 1360 by [email protected]: es53.js doesn't follow the [[CanPut]] logic correctly
http://code.google.com/p/google-caja/issues/detail?id=1360
The current behavior is indeed buggy, but the above diagnosis is not correct. Since ES53 implements the strict language, the line
G.prototype.constructor = G;
must throw a TypeError, not fail silently.
