Bug 247380

Summary: Check for execution context between different phases of event listeners
Product: WebKit Reporter: Chirag M Shah <chirag_m_shah>
Component: DOMAssignee: Chirag M Shah <chirag_m_shah>
Status: RESOLVED FIXED    
Severity: Normal Keywords: InRadar
Priority: P2    
Version: Other   
Hardware: Unspecified   
OS: Unspecified   

Chirag M Shah
Reported 2022-11-02 14:18:16 PDT
Event listeners can move a frame, which invalidates the current script execution context between phases. Basically, we should be checking for script execution context between: fireEventListeners(event, EventInvokePhase::Capturing); and fireEventListeners(event, EventInvokePhase::Bubbling); in EventTarget.cpp
Attachments
Chirag M Shah
Comment 1 2022-11-04 10:54:01 PDT
Chirag M Shah
Comment 2 2022-11-04 10:57:04 PDT
Chirag M Shah
Comment 3 2022-11-04 16:55:57 PDT
EWS
Comment 4 2022-11-07 06:44:13 PST
Committed 256402@main (1624156ba5f9): <https://commits.webkit.org/256402@main> Reviewed commits have been landed. Closing PR #6141 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.