We should have a fast-path for casting JS wrappers to JSElement, too!
Created attachment 228577 [details] Patch
Comment on attachment 228577 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=228577&action=review > Source/WebCore/bindings/js/JSElementCustom.h:38 > + return value.asCell()->type() >= JSElementType ? JSC::jsCast<JSElement*>(value) : nullptr; >= is a dangerous game.
Committed r166765: <http://trac.webkit.org/changeset/166765>