On 10/28/14, 12:23 PM, Allen Wirfs-Brock wrote:
However, that won't do any thing for host defined global properties

Hmm.

That's actually a problem. The following host defined (by DOM) global properties need to be non-configurable and not shadowable when evaluating script in the global scope: "window", "document", "location", "top". Allowing those to be shadowed or otherwise overridden leads to security bugs.

-Boris

_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss

Reply via email to