Also, why don't contexts within the same isolate share built-ins such as Math et al?
So that one <iframe> can do delete Math.max and any other <iframe>s aren't bothered by that.
(And also because functions have identity and that's observable.)
ClearScript Developers
unread,
Oct 26, 2021, 10:21:43 AM10/26/21
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to v8-users
Thanks, Jakob.
It would appear that an object's creation context indicates "which NativeContext initiated a certain action. V8 needs that information for security checks."
Is that correct? An object's creation context is used for security checks? Is there no other significance to it?
(And also because functions have identity and that's observable.)
Could you elaborate on that? What does it mean for a function to have identity? Is it safe, in a given context, to invoke a function that was created in (or is associated with) a different context (in the same isolate, of course)?