alii
JSC contributor
Summary
Works exclusively in JSC, on runtime and builtin semantics rather than the JIT tiers — JSON.stringify's fast path diverging from the general path on non-enumerable `toJSON` and a swapped array prototype, promise job behavior when SpeciesConstructor throws, and an ICU word-break boundary off-by-one in Intl.Segmenter. The pattern is spec-conformance edge cases at the boundary between optimized fast paths and the observable-side-effect-safe slow paths, plus ICU interop, with nothing classified as a security or hardening fix. Systematic-variant candidate: the fast-path/slow-path divergence class this contributor keeps landing on — other JSC builtins that shortcut around user-observable prototype mutation or overridden own properties are the natural sweep.
Components
Security Fix History
- No security fixes recorded
Hardening Commits
- No hardening commits recorded
Recent Commits
- 2026-07-10 [JSC] JSON.stringify's fast path skips a non-enumerable own toJSON and a replaced array prototype
- 2026-07-10 PromiseResolveThenableJob should reject the promise when SpeciesConstructor throws
- 2026-04-18 [JSC] Intl.Segmenter isWordLike returns false for numeric segments due to off-by-one in UBRK_WORD_NONE_LIMIT check