tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

Object-deleteProperty-error-01.js (456B)

      1 // Don't crash when a scripted proxy handler throws Error.prototype.
      2 
      3 var g = newGlobal({newCompartment: true});
      4 var dbg = Debugger(g);
      5 dbg.onDebuggerStatement = function (frame) {
      6    try {
      7        frame.arguments[0].deleteProperty("x");
      8    } catch (exc) {
      9        return;
     10    }
     11    throw new Error("deleteProperty should throw");
     12 };
     13 
     14 g.eval("function h(obj) { debugger; }");
     15 g.eval("h(new Proxy({}, { deleteProperty() { throw Error.prototype; }}));");