Re: New ES6 draft is available

On 12/7/12 3:00 PM, Boris Zbarsky wrote:
> On 12/7/12 2:43 PM, David Bruant wrote:
>> I've just been thinking about this question more. Consider:
>> * a WindowProxy instance w proxies to windowA
>> * A non-configurable property 'whatever' is set on windowA through w
>> (value is not important, but non-configurability is)
>> * WindowProxy proxies to a different windowB object
>>
>> is 'whatever' a property of windowB? of the WindowProxy object itself?
>
> It has to be windowB to avoid cross-site information leakage....

Er, more precisely...  To avoid cross-site issues reading the property 
from an origin that's not the same as windowB should throw after the 
above steps.  And reading it from the origin of windowB should report no 
property.

-Boris

Received on Friday, 7 December 2012 20:09:59 UTC