I found out this much as well. Thanks for the quick reply though :)

On Friday, May 18, 2012 3:43:16 PM UTC+2, Jakob Kummerow wrote:
>
> The DOM bindings for V8 are part of WebKit, not part of V8. Start looking 
> here: http://trac.webkit.org/browser/trunk/Source/WebCore/bindings/v8
>
> On Fri, May 18, 2012 at 1:17 PM, <[email protected]> wrote:
>
>> Hi guys,
>>
>> I'm working on a project where I want to achieve taint tracking in 
>> Chromium. In essence, I want to be able to identify things coming from the 
>> DOM, what might happen to them (concat, substring, etc) and be able to 
>> identify variables derived from them. My question in a nutshell is: how and 
>> where are calls to the DOM implemented? I gather that v8 is provided a 
>> context from the rendering engine and then works on that - couldn't find 
>> the corresponding code though.
>>
>> Your help is very much appreciated
>>  Ben
>>
>
>

-- 
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to