test/JSON/stringify-replacer.js

//-------------------------------------------------------------------------------------------------------
// Copyright (C) Microsoft. All rights reserved.
// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
//-------------------------------------------------------------------------------------------------------


var o = new Array();
var a = new Object();

// Generate getter that will return a constructed string
function propString(i)
{
    return function() { var ret = "a" + i; return ret; };
}

function init(o, a)
{
    for (var i = 0; i < 21; i++)
    {
        // Create a replacer array that doesn't hold the string reference by using a getter to create
        // the string.
        Object.defineProperty(o, i, { get: propString(i) } );


        // Initialize the object to be stringify
        a["a" + i] = i;
    }
}

init(o,a);

WScript.Echo(JSON.stringify(a,o));

// Bug 30349 - invalid replacer array element after valid element causes crash regardless of input
WScript.Echo(JSON.stringify(true, [new Number(1.5), true])); // Original repro
WScript.Echo(JSON.stringify(false, [new Number(1.5), true]));
WScript.Echo(JSON.stringify(null, [new Number(1.5), true]));
// Valid input should just ignore any bad replacer array elements
WScript.Echo(JSON.stringify(a, [false, "a0", true, "a10", false]));