SVGTransform holds a SVGMatrix member which can be accessed from JavaScript via the property "SVGTransform.matrix". When attaching or detaching SVGTransform, its new access right should be set to the SVGMatrix. If SVGTransform is a read only property, SVGMatrix has to be read only as well.
Created attachment 391414 [details] Patch
<rdar://problem/59311384>
*** This bug has been marked as a duplicate of bug 207462 ***