« Return to Thread: Another de-facto insecurity we need to fix in ES5

Re: Another de-facto insecurity we need to fix in ES5

by Maciej Stachowiak :: Rate this Message:

Reply to Author | View in Thread


On Jun 17, 2009, at 3:34 PM, Mark S. Miller wrote:

On Mon, Jun 15, 2009 at 9:23 PM, Brendan Eich <brendan@...> wrote:
For ES5, this is a tempest in a teapot.

We at Mozilla are trying to remove assignable __proto__ in a near-term release,

Hi Brendan, this is wonderful news!

As reason for skepticism, our v8 folk cite

<http://www.google.dk/codesearch?q="__proto__+%3D+"+lang:javascript>
  

Seems like a fair chunk of those examples are in JS code that's not deployed on public Web sites.

 - Maciej


_______________________________________________
es-discuss mailing list
es-discuss@...
https://mail.mozilla.org/listinfo/es-discuss

 « Return to Thread: Another de-facto insecurity we need to fix in ES5