> Le 26 avr. 2015 à 00:58, Kevin Smith <[email protected]> a écrit :
>
> If we used "x.constructor" to determine the actual constructor, then someone
> could just change the "constructor" property for x and fool someone who wrote
> "C.resolve(x)" and expected to get an instance of C back.
Note that if you want to protect yourself against tampering the `constructor`
property, you should seriously consider to protect yourself against tampering
the `then` property. That means that you should at the very least execute
`preventExtensions` on your promise anyway.
—Claude
_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss
