Promise's domain property allows escaping VM #15673
Description
- Version: v8.x / master
- Platform: Linux debian-x240s 4.9.0-3-amd64 SMP Debian 4.9.30-2+deb9u5 (2017-09-19) x86_64 GNU/Linux
- Subsystem: vm
> vm.runInNewContext('Promise.resolve().domain') instanceof Object
true
> vm.runInNewContext('Promise.resolve().domain instanceof Object')
falseA question of a larger scope is if the promise hooks should be enabled at all for VM contexts.