Updates:
Status: WontFix
Comment #13 on issue 1274 by [email protected]: Current "virtualize"
strategy isn't safe
http://code.google.com/p/google-caja/issues/detail?id=1274
As long as host code communicates with guest code thru the membrane, I think we have a non-issue. Marking as "Won't fix." Also filing issue1447 against documentation to verify that all our examples use that pattern.
