https://codereview.appspot.com/10181043/diff/3001/src/com/google/caja/ses/startSES.js
File src/com/google/caja/ses/startSES.js (right):
https://codereview.appspot.com/10181043/diff/3001/src/com/google/caja/ses/startSES.js#newcode301
src/com/google/caja/ses/startSES.js:301: if
(opt_mitigateOpts.parseProgram === false) {
On 2013/06/11 16:57:21, kpreid2 wrote:
Isn't the point of this CL that we can now stop unconditionally
parsing here?
Done. Although you already LGTMed this, please reapprove as removing
parseProgram correctly is clearly security critical. Thanks.
https://codereview.appspot.com/10181043/diff/8001/src/com/google/caja/ses/mitigateGotchas.js
File src/com/google/caja/ses/mitigateGotchas.js (right):
https://codereview.appspot.com/10181043/diff/8001/src/com/google/caja/ses/mitigateGotchas.js#newcode206
src/com/google/caja/ses/mitigateGotchas.js:206:
options.rewriteFunctionCalls ||
Added this even though it is not yet implemented, in order to avoid a
future mistake.
https://codereview.appspot.com/10181043/
--
---
You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.