W3C home > Mailing lists > Public > public-web-security@w3.org > February 2011

Re: defineProperty is a blacklist

From: <sird@rckc.at>
Date: Sun, 13 Feb 2011 22:55:42 +0100
Message-ID: <AANLkTikUqecrwAM7zG=_ksGRaZVyPgvP3oCtLcHu78v3@mail.gmail.com>
To: gaz Heyes <gazheyes@gmail.com>
Cc: public-web-security@w3.org
What about JS Workers?

I know they are async, but may work? What's the use case you are trying to

-- Eduardo

On Sun, Feb 13, 2011 at 9:57 PM, gaz Heyes <gazheyes@gmail.com> wrote:

> Hey all
> I'd like to emphasize my point made at the OWASP summit, defineProperty
> rocks and the ES5 specification was created by the hands of js gods but for
> all it's brilliance defineProperty is still a blacklist. We need the ability
> to somehow create a whitelist of allowed properties and the ability to apply
> a property descriptor to any properties that do not conform to this
> whitelist.
> Cheers
> Gareth
Received on Sunday, 13 February 2011 21:56:29 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:18 UTC