Updates:
Status: Started
Owner: erights
Labels: Security
Comment #7 on issue 1752 by kpreid.switchb.org: Host object leaked without
being tamed: "valueOf()"
http://code.google.com/p/google-caja/issues/detail?id=1752
I claimed it for the initial evaluation, but then I figured it was merely
important to fix/document the bogus 'host object leak'. I now see that the
this=scope-object is a hazard for capability programming (if a program
stashes an untrusted function in a global variable and calls it), and I
have no particular thoughts on fixing it, so over to you for now.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
---
You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
