W3C home > Mailing lists > Public > public-script-coord@w3.org > October to December 2012

Re: New ES6 draft is available

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Fri, 07 Dec 2012 15:09:23 -0500
Message-ID: <50C24CF3.3020308@mit.edu>
To: public-script-coord@w3.org
On 12/7/12 3:00 PM, Boris Zbarsky wrote:
> On 12/7/12 2:43 PM, David Bruant wrote:
>> I've just been thinking about this question more. Consider:
>> * a WindowProxy instance w proxies to windowA
>> * A non-configurable property 'whatever' is set on windowA through w
>> (value is not important, but non-configurability is)
>> * WindowProxy proxies to a different windowB object
>>
>> is 'whatever' a property of windowB? of the WindowProxy object itself?
>
> It has to be windowB to avoid cross-site information leakage....

Er, more precisely...  To avoid cross-site issues reading the property 
from an origin that's not the same as windowB should throw after the 
above steps.  And reading it from the origin of windowB should report no 
property.

-Boris
Received on Friday, 7 December 2012 20:09:59 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 8 May 2013 19:30:08 UTC