DescriptionFreezing an object without a NUM___ property descriptor would generate
an incomplete property descriptor resulting in a later isWritable test
converting it into a writable and configurable one.
This meant that any supposedly-frozen object with numeric properties
and without a NUM___ had writable numeric properties; examples of such
objects are the deodorized prototypes (e.g. Function.prototype) and
Object.freeze(['foo']).
Fixes <https://code.google.com/p/google-caja/issues/detail?id=1683>.
@r5394
Patch Set 1 #
MessagesTotal messages: 2
|