chakra-core / chakra-core/ChakraCore
Accessing `arguments.callee.caller` in sloppy callback to JsBuiltIn throws
Open
Bug
Severity: 3
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
```js
[1, 2, 3].forEach(function () { arguments.callee.caller; })
```
This throws with Array.prototype.forEach as a JsBuiltIn, but passes with the native version. Same thing for .filter and .flatMap. V8 and SpiderMonkey do not throw.
Contributor guide
Assessment
This issue has not been assessed yet.