I don't see the security problem here. If you store arbitrary keys in an 
instance of Object you are doing it wrong. Use an hash table for that. {} 
is not an hash table. Object.create(null) is more likely, or you just have 
to implement it or another data structure that does the job (js is supposed 
to be low-level, relatively speaking).
The hypothesis of domenic "You're probably used to stuffing…" doesn't apply 
(I hope) to most programmers that use javascript for a living. If it does, 
maybe it is better to fix some code before killing features of the language.

On Friday, September 20, 2013 2:00:05 PM UTC+2, Andrew Kelley wrote:

> mks unfortunately I cannot responsibly ignore it. Whether or not I have a 
> use case for it does nothing to change the security issues (refer to the 
> original post in this thread).
>
>
> On Fri, Sep 20, 2013 at 7:19 AM, mks <[email protected] <javascript:>
> > wrote:
>
>> If you don't find a place for a writable __proto__ in **your** use case, 
>> just don't use it.
>>
>> -- 
>> -- 
>> Job Board: http://jobs.nodejs.org/
>> Posting guidelines: 
>> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
>> You received this message because you are subscribed to the Google
>> Groups "nodejs" group.
>> To post to this group, send email to [email protected]<javascript:>
>> To unsubscribe from this group, send email to
>> [email protected] <javascript:>
>> For more options, visit this group at
>> http://groups.google.com/group/nodejs?hl=en?hl=en
>>  
>> --- 
>> You received this message because you are subscribed to a topic in the 
>> Google Groups "nodejs" group.
>> To unsubscribe from this topic, visit 
>> https://groups.google.com/d/topic/nodejs/HvwsNAuAN2Q/unsubscribe.
>> To unsubscribe from this group and all its topics, send an email to 
>> [email protected] <javascript:>.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>
>

-- 
-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to