Hi,
Thanks so much for Caja! It's exactly what I'm looking for to allow client
extensions to my platform.
I was wondering if there is a way to have the host program provide an
interceptor for entering a function/backward branches (such as before
"continue" statements or just before the end for loops, while loops and
do...while loops).
Basically, I would want this interceptor to be called every time we execute
non-linear code and either risk freezing the browser or blowing out the
stack.
Then, I could have this interceptor either just return to allow the
execution or throw an exception to prevent the code from continuing to run.
This would greatly extend the security of my Caja sandbox, and prevent one
of the main attacks I can forsee from my client code.
while (true) {
// infinite loop
}
or
var j = 2;
for (var i = 0; i < j; i ++) {
j ++;
}
or
function loopme() {
part2();
}
function part2() {
part3();
}
function part3() {
loopme();
}
loopme();
Any advice would be much appreciated!
Michael.
--
---
You received this message because you are subscribed to the Google Groups
"Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
