6904a8120b
.. mostly mentions in mjsunit `Flags:` lines and in comments. Bug: v8:10386 Change-Id: If79dfdc448d0a3f19883ef1f816e77e750cb4061 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3865964 Commit-Queue: Jakob Linke <jgruber@chromium.org> Reviewed-by: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Leszek Swirski <leszeks@chromium.org> Cr-Commit-Position: refs/heads/main@{#82852}
16 lines
580 B
JavaScript
16 lines
580 B
JavaScript
// Copyright 2020 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
// Flags: --allow-natives-syntax
|
|
|
|
assertTrue(%ArraySpeciesProtector());
|
|
assertTrue(%PromiseSpeciesProtector());
|
|
assertTrue(%RegExpSpeciesProtector());
|
|
assertTrue(%TypedArraySpeciesProtector());
|
|
Object.defineProperty([], "constructor", { value: {} });
|
|
assertFalse(%ArraySpeciesProtector());
|
|
assertTrue(%PromiseSpeciesProtector());
|
|
assertTrue(%RegExpSpeciesProtector());
|
|
assertTrue(%TypedArraySpeciesProtector());
|