Bug 248328

Summary:	[WebIDL] Hoist protectedThis reference in JSEventListener::handleEvent()
Product:	WebKit	Reporter:	Alexey Shvayka <ashvayka>
Component:	Bindings	Assignee:	Alexey Shvayka <ashvayka>
Status:	RESOLVED FIXED
Severity:	Enhancement	CC:	cdumez, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	All
OS:	All
See Also:	https://github.com/web-platform-tests/wpt/pull/37170

Description Alexey Shvayka 2022-11-24 18:02:17 PST

Theoretically jsFunction->get() may remove currently executing event listener.

Comment 1 Radar WebKit Bug Importer 2022-11-24 18:10:43 PST

<rdar://problem/102654520>

Comment 2 Alexey Shvayka 2022-11-24 18:12:08 PST

Pull request: https://github.com/WebKit/WebKit/pull/6800

Comment 3 EWS 2022-11-25 15:16:23 PST

Committed 257027@main (a8c7d4f465b1): <https://commits.webkit.org/257027@main>

Reviewed commits have been landed. Closing PR #6800 and removing active labels.