On Thu, Nov 8, 2012 at 11:14 AM, Jamey Wood <[email protected]> wrote:

> Thanks, Kevin.
>
> The reason I did that is that I'm not clear on how functional and
> production-ready ES5 mode really is.  When will it no longer be label as
> Experimental?
>

ES5 mode is very functional and we're continuing to mark it as experimental
till we've closed a few more semantic differences between ES5/3 and ES5
modes that allows legacy code to work more similarly on browsers that run
ES5 mode vs browsers that only support ES5/3.  Our plan is to turn off the
experimental flag before the end of year.

As one specific example, does it support external javascript library
> references?  When I change the little test case to use jquery (per the
> attached files), it stops working in Safari 6.  Is that expected at this
> point?
>

Your container code is explicitly forbidding the loading of external
resources.  Specifically the second argument to caja.load() is a callback
that specifies what URLs you want to allow -- see
https://developers.google.com/caja/docs/controllingnetwork/.

If that was just an error in copy and paste, what error message do you get
when you run the code on Safari?

jas


>
> Thanks,
> Jamey
>
> On Thursday, November 8, 2012 10:16:21 AM UTC-7, Kevin Reid wrote:
>
>> On Thu, Nov 8, 2012 at 8:52 AM, Jamey Wood <[email protected]> wrote:
>>
>>> Is there any guidance on minimizing the time is takes a load a caja
>>> guest page?  The attached files demonstrate a little test case I'm using to
>>> measure the time it takes to load and run a trivial caja guest page.
>>>  Please let me know if there are any major issues with this methodology.
>>
>> [...]
>>> Are there any general practices that can be used to minimize this
>>> overhead?
>>>
>>
>> Practices? Stop using {forceES5Mode: false}. ES5 mode is the future and
>> if it isn't significantly faster (on supported browsers), we want to know.
>>
>> (Note that forceES5Mode is intended for debugging/testing purposes only
>> and if set to true may cause insecurity. You should never use it in a
>> public application. Its relative "es5Mode" is safer, if you must have a
>> flag.)
>>
>

Reply via email to