From 773cd97a37f24fa8e47f21fb98300e390f93c6c8 Mon Sep 17 00:00:00 2001
From: Jordan Harband If P is " If P is " Return the concatenation of keys and « "CrossOriginPropertyFallback ( P )
-
@@ -90412,7 +90412,7 @@ interface BarProp {
[[Enumerable]]: false,
[[Configurable]]: false }).then
", @@toStringTag,
- @@hasInstance, or @@isConcatSpreadable, then return
+ then
", %Symbol.toStringTag%,
+ %Symbol.hasInstance%, or %Symbol.isConcatSpreadable%, then return
PropertyDescriptor{
[[Value]]: undefined,
[[Writable]]: false,
@@ -88908,7 +88908,7 @@ dictionary DragEventInit : MouseEventInit {
data-x="list append">append e.[[Property]] to keys.then
",
- @@toStringTag, @@hasInstance, @@isConcatSpreadable
+ %Symbol.toStringTag%, %Symbol.hasInstance%, %Symbol.isConcatSpreadable%
».
Perform ! location.[[DefineOwnProperty]](@@toPrimitive, { +
Perform ! location.[[DefineOwnProperty]](%Symbol.toPrimitive%, { [[Value]]: undefined, [[Writable]]: false, [[Enumerable]]: false, @@ -90424,12 +90424,12 @@ interface BarProp {
Return location.
The addition of valueOf
and @@toPrimitive own
+
The addition of valueOf
and %Symbol.toPrimitive% own
data properties, as well as the fact that all of Location
's IDL attributes are marked
[LegacyUnforgeable]
, is required by legacy code that consulted
the Location
interface, or stringified it, to determine the document URL, and then used it in a security-sensitive way.
- In particular, the valueOf
, @@toPrimitive, and valueOf
, %Symbol.toPrimitive%, and [LegacyUnforgeable]
stringifier mitigations ensure that code such as
foo[location] = bar
or location + ""
cannot be
misdirected.