Trevor Jim wrote: > I think there are not race conditions because javascript does not have > concurrency.
Actually, with things like synchronous XMLHttpRequest it does in practice... As long as a script is careful not to do anything which might require spinning the event loop (XMLHttpRequest, prompts, plug-ins, etc), it should be non-reentrant in practice. > I think if there are race conditions in my scheme, then there are race > conditions in any web app that uses javascript. Yes. There probably are. -Boris _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
