Bug 263506

Summary:	Make sensitive jsc global namespace properties not enumerable by Object.getOwnPropertyNames.
Product:	WebKit	Reporter:	Mark Lam <mark.lam>
Component:	JavaScriptCore	Assignee:	Mark Lam <mark.lam>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Mark Lam 2023-10-21 22:58:55 PDT

Some functions in the jsc shell GlobalObject are only added as debugging aids.  They are meant to be used carefully under controlled conditions for test development.  Though they are added as DontEnum, Object.getOwnPropertyNames() still enumerates them.  We should filter out all DontEnum properties of this GlobalObject so as not to trip up fuzzers that try to fuzz with Object.getOwnPropertyNames.

rdar://112815258

Comment 1 Mark Lam 2023-10-21 23:31:45 PDT

Pull request: https://github.com/WebKit/WebKit/pull/19399

Comment 2 EWS 2023-10-22 20:54:06 PDT

Committed 269639@main (15477a1fd6b5): <https://commits.webkit.org/269639@main>

Reviewed commits have been landed. Closing PR #19399 and removing active labels.