Trial

Summary

Trial works almost entirely in JavaScriptCore, with a recent focus on turning on new TC39 iterator and module proposals — import defer, iterator chunking, and joint iteration — plus supporting builtin work like `JSArrayIterator::next`. The pattern is feature enablement rather than security or hardening work, with one adjacent register-allocation cleanup in the `branchIfNumber` scratch-register paths. A promising area to sweep for related bugs: newly flipped-on proposals ship fresh parser, builtin, and iterator-protocol paths that have had little fuzzing exposure, and the new array iterator fast path is a natural place to probe for type-confusion and reentrancy issues.

Components

Security Fix History

• No security fixes recorded

Hardening Commits

• No hardening commits recorded

Recent Commits

• 2026-08-04 [JSC] Remove various scratch registers as branchIfNumber etc. no longer need to take a scratch for 64bit
• 2026-08-03 [JSC] Enable import defer proposal
• 2026-08-03 [JSC] Enable iterator chunking
• 2026-08-03 [JSC] Enable joint-iteration proposal
• 2026-08-01 [JSC] Add JSArrayIterator::next