See also:

https://bugs.ecmascript.org/show_bug.cgi?id=2437

But as Domenic pointed out, there is nothing new under the sun. 

—Claude 

> Le 8 déc. 2014 à 22:24, François REMY <[email protected]> a écrit 
> :
> 
> Hi,
> 
> I just had an horrible idea which can DDOS Firefox or hangs your tab in IE:
> 
>    var o = {};
>    var p = new Proxy(o, { get: function(o, p) { return o[p]; } });
>    o.__proto__ = p;
> 
> This works because of the cycle detection for setting prototypes. Should it?
> 
> Best regards,
> François
> 
> __________________________
> PS: I know you could get the same behavior with a proto having a reference to 
> itself via a global variable, but in this case the proxy looks fine, and the 
> exploitation comes from a code he can’t control.
> _______________________________________________
> es-discuss mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/es-discuss
_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss

Reply via email to