W3C home > Mailing lists > Public > public-web-security@w3.org > February 2011

Re: defineProperty is a blacklist

From: <sird@rckc.at>
Date: Sun, 13 Feb 2011 22:55:42 +0100
Message-ID: <AANLkTikUqecrwAM7zG=_ksGRaZVyPgvP3oCtLcHu78v3@mail.gmail.com>
To: gaz Heyes <gazheyes@gmail.com>
Cc: public-web-security@w3.org
What about JS Workers?

I know they are async, but may work? What's the use case you are trying to
solve?

Greetz!
-- Eduardo



On Sun, Feb 13, 2011 at 9:57 PM, gaz Heyes <gazheyes@gmail.com> wrote:

> Hey all
>
> I'd like to emphasize my point made at the OWASP summit, defineProperty
> rocks and the ES5 specification was created by the hands of js gods but for
> all it's brilliance defineProperty is still a blacklist. We need the ability
> to somehow create a whitelist of allowed properties and the ability to apply
> a property descriptor to any properties that do not conform to this
> whitelist.
>
> Cheers
>
> Gareth
>
Received on Sunday, 13 February 2011 21:56:29 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Sunday, 13 February 2011 21:57:49 GMT