Fix #87: Require JSON.parse to be executed in a clean global (#115)

* Fix #88: Use a clean global object for conversion from object to JSON for JWK
w3c · Aug 26, 2016 · 3f13951 · 3f13951
1 parent 87c77ea
commit 3f13951
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 8 deletions.
diff --git a/spec/Overview-WebCryptoAPI.xml b/spec/Overview-WebCryptoAPI.xml
@@ -775,8 +775,8 @@ of contents, section numbers, certain processing instructions).
           <li>
             <p>
               Let <var>result</var> be the object literal that results from executing the
-              <code>JSON.parse</code> internal function, with <code>text</code>
-              argument set to a JavaScript String containing <var>json</var>.
+              <code>JSON.parse</code> internal function in the context of a new global object,
+              with <code>text</code> argument set to a JavaScript String containing <var>json</var>.
             </p>
           </li>
           <li>
@@ -2395,15 +2395,16 @@ interface <dfn id="dfn-SubtleCrypto">SubtleCrypto</dfn> {
                       <li>
                         <p>
                           Convert <var>key</var> to an ECMAScript Object, as specified in [
-                          <a href="#WebIDL">WebIDL</a>].
+                          <a href="#WebIDL">WebIDL</a>], performing the conversion in the
+                          context of a new global object.
                         </p>
                       </li>
                       <li>
                         <p>
                           Let <var>json</var> be the result of representing <var>key</var> as a
                           UTF-16 string conforming to the JSON grammar; for example, by executing
                           the <code>JSON.stringify</code> algorithm specified in
-                          <a href="#ECMA-262">ECMA262</a>.
+                          <a href="#ECMA-262">ECMA262</a> in the context of a new global object.
                         </p>
                       </li>
                       <li>

diff --git a/spec/Overview.html b/spec/Overview.html
@@ -790,8 +790,8 @@ <h2>9. Terminology</h2>
           <li>
             <p>
               Let <var>result</var> be the object literal that results from executing the
-              <code>JSON.parse</code> internal function, with <code>text</code>
-              argument set to a JavaScript String containing <var>json</var>.
+              <code>JSON.parse</code> internal function in the context of a new global object,
+              with <code>text</code> argument set to a JavaScript String containing <var>json</var>.
             </p>
           </li>
           <li>
@@ -2365,15 +2365,16 @@ <h4>14.3.11. The wrapKey method</h4>
                       <li>
                         <p>
                           Convert <var>key</var> to an ECMAScript Object, as specified in [
-                          <a href="#WebIDL">WebIDL</a>].
+                          <a href="#WebIDL">WebIDL</a>], performing the conversion in the
+                          context of a new global object.
                         </p>
                       </li>
                       <li>
                         <p>
                           Let <var>json</var> be the result of representing <var>key</var> as a
                           UTF-16 string conforming to the JSON grammar; for example, by executing
                           the <code>JSON.stringify</code> algorithm specified in
-                          <a href="#ECMA-262">ECMA262</a>.
+                          <a href="#ECMA-262">ECMA262</a> in the context of a new global object.
                         </p>
                       </li>
                       <li>