See also: https://bugs.ecmascript.org/show_bug.cgi?id=2437
But as Domenic pointed out, there is nothing new under the sun. —Claude > Le 8 déc. 2014 à 22:24, François REMY <[email protected]> a écrit > : > > Hi, > > I just had an horrible idea which can DDOS Firefox or hangs your tab in IE: > > var o = {}; > var p = new Proxy(o, { get: function(o, p) { return o[p]; } }); > o.__proto__ = p; > > This works because of the cycle detection for setting prototypes. Should it? > > Best regards, > François > > __________________________ > PS: I know you could get the same behavior with a proto having a reference to > itself via a global variable, but in this case the proxy looks fine, and the > exploitation comes from a code he can’t control. > _______________________________________________ > es-discuss mailing list > [email protected] > https://mail.mozilla.org/listinfo/es-discuss
_______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss

