Comment #3 on issue 1492 by kpreid.switchb.org: caja.js needs a way to kill guests
http://code.google.com/p/google-caja/issues/detail?id=1492

As Doug Koellmer points out today on google-caja-discuss,
https://groups.google.com/d/msg/google-caja-discuss/Tn_H7-Y_-A0/EaMqQmZAxkIJ
Domado should be extended to cancel (or suppress the callback of) outstanding setTimeout, setInterval, and XHR to help clear out an unaware/uncaring guest.

We should also make sure make sure that a “dead” guest's remaining authority is revoked or harmless even if we think there is no way for the guest to execute further. (For example, if guests can still compute and the vdoc-container___ element was reused for another guest (not something we would actually do), the first guest could modify it.)

Reply via email to