commit 3380786d7dbc0adc13aaf00e2e19f4581b925711
parent c0f47fb08f8a684156a83f7d32099f5b2c66558e
Author: Ahmad Saleem <52317531+Ahmad-S792@users.noreply.github.com>
Date: Fri, 19 Dec 2025 09:14:34 +0000
Bug 2006238 [wpt PR 56769] - [Manual] WebKit Export https://bugs.webkit.org/show_bug.cgi?id=271360, a=testonly
Automatic update from web-platform-tests
[Manual] WebKit Export https://bugs.webkit.org/show_bug.cgi?id=271360 (#56769)
This is manual export of test fix done in https://commits.webkit.org/303858@main
on WebKit upstream, automation script was failing, so doing this manually.
This test was previously relying on constructor of HighlightRegistry, which is not in
specification anymore. Additionally, it also properly restore Map.prototype to its
original state after the test completes. See more detailed info on WebKIt commit.
--
wpt-commits: c3c94a087ff963f294a2fa2ea29e13e2c175e33b
wpt-pr: 56769
Diffstat:
1 file changed, 31 insertions(+), 3 deletions(-)
diff --git a/testing/web-platform/tests/css/css-highlight-api/HighlightRegistry-maplike-tampered-Map-prototype.html b/testing/web-platform/tests/css/css-highlight-api/HighlightRegistry-maplike-tampered-Map-prototype.html
@@ -3,8 +3,6 @@
<link rel="help" href="https://drafts.csswg.org/css-highlight-api-1/">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
-
-<body>
<script>
"use strict";
@@ -25,11 +23,38 @@ function tamperMapPrototype() {
Object.freeze(Map.prototype);
}
+function restoreMapPrototype(originalDescriptors) {
+ // Create a new object with the original descriptors
+ const newProto = Object.create(Object.prototype);
+
+ for (const [key, descriptor] of Object.entries(originalDescriptors)) {
+ if (descriptor) {
+ Object.defineProperty(newProto, key, descriptor);
+ }
+ }
+ // Replace the frozen prototype with the restored one
+ Object.setPrototypeOf(Map, newProto);
+}
+
test(() => {
+ const originalDescriptors = {
+ size: Object.getOwnPropertyDescriptor(Map.prototype, 'size'),
+ entries: Object.getOwnPropertyDescriptor(Map.prototype, 'entries'),
+ forEach: Object.getOwnPropertyDescriptor(Map.prototype, 'forEach'),
+ get: Object.getOwnPropertyDescriptor(Map.prototype, 'get'),
+ has: Object.getOwnPropertyDescriptor(Map.prototype, 'has'),
+ keys: Object.getOwnPropertyDescriptor(Map.prototype, 'keys'),
+ values: Object.getOwnPropertyDescriptor(Map.prototype, 'values'),
+ [Symbol.iterator]: Object.getOwnPropertyDescriptor(Map.prototype, Symbol.iterator),
+ clear: Object.getOwnPropertyDescriptor(Map.prototype, 'clear'),
+ delete: Object.getOwnPropertyDescriptor(Map.prototype, 'delete'),
+ set: Object.getOwnPropertyDescriptor(Map.prototype, 'set')
+ };
+
tamperMapPrototype();
const highlight = new Highlight(new StaticRange({startContainer: document.body, endContainer: document.body, startOffset: 0, endOffset: 0}));
- const highlightRegistry = new HighlightRegistry();
+ const highlightRegistry = CSS.highlights;
assert_equals(highlightRegistry.size, 0);
highlightRegistry.set("foo", highlight);
@@ -57,5 +82,8 @@ test(() => {
let callbackCalled = false;
highlightRegistry.forEach(() => { callbackCalled = true; });
assert_true(callbackCalled);
+
+ highlightRegistry.clear();
+ restoreMapPrototype(originalDescriptors);
}, "HighlightRegistry is a maplike interface that works as expected even if Map.prototype is tampered.");
</script>
