Updates:
Cc: [email protected] [email protected]
Comment #3 on issue 4289 by [email protected]: Array.prototype.concat's
[[Get]] of @@isConcatSpreadable fails when combined with cross-origin
security checks
https://code.google.com/p/v8/issues/detail?id=4289
[ccing a couple folks who care about access checks]
We definitely do not want to bypass the access checks, otherwise we're
opening up a synchronous communication channel across origins. I think the
only options are:
1. Treat the need for an access check as "not spreadable"
2. Do an access check, but treat a failure as "not spreadable" instead of
throwing
3. Do a [[Get]] and swallow any exception, treating an exception as "not
spreadable".
(2) is probably the ideal but possibly complicated to get right, with (3)
being unnecessarily ugly and (1) being slightly more restrictive than
necessary.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
