JavaScript engine fundamentals: Shapes and Inline Caches · Mathias

By A Mystery Man Writer

JavaScript and the Inner Workings of your Browser - Software Engineering Daily

Making

JavaScript Essentials: The Engine - Rainer Hahnekamp

JavaScript and the Inner Workings of your Browser - Software Engineering Daily

Making

Getting RCE in Chrome with incorrect side effect in the JIT

CVE-2023-3079 (Bug in the handling of the arguments object)

CVE-2023-3079 (Bug in the handling of the arguments object)

The Chromium super (inline cache) type confusion - The GitHub Blog

JavaScript essentials: why you should know how the engine works