You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Should we update the spec to exclude proxies, e.g. replacing "if IsArray(input)" with "if input is an Array exotic object"?
Alternately, should array proxies be supported? What are the consequences of allowing these? Would the value→key conversion algorithm potentially blow up in more places?
Activity
asutherland commentedon Nov 20, 2019
The algorithms where we
clone a valuealready forbid proxies thanks to step 23 of StructuredSerializeInternal (https://html.spec.whatwg.org/#structuredserializeinternal) which prevents use of proxies.It makes sense to me to also forbid proxies where we directly invoke algorithms without first performing the clone step.
(Also, Firefox/Gecko is a hard no on supporting proxies in IndexedDB were that not already the case!)
inexorabletash commentedon Nov 20, 2019
SGTM. I'll put up a spec PR and wpt PR, time permitting, changing the text to the exotic Array object check.
Indexed DB: Verify array proxies are not valid keys (#20352)
Disallow proxies during key conversion
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…
Disallow proxies during key conversion
Bug 1598170 [wpt PR 20352] - Indexed DB: Verify array proxies are not…