Re: defineProperty is a blacklist

On 13 February 2011 21:55, sird@rckc.at <sird@rckc.at> wrote:

> What about JS Workers?
>

Last time I checked webworkers they didn't seem to allow the removal of all
properties from a worker, in addition it was possible to create requests
that included cookies from the site.This is a perfect example of the need
for a whitelist.

<http://www.businessinfo.co.uk/labs/webworker/webworker.html>


> I know they are async, but may work? What's the use case you are trying to
> solve?
>

I simply want to freeze or disable properties of a object that are unknown
and do not match a whitelist. Most useful in a sandbox situation.

Received on Monday, 14 February 2011 07:44:51 UTC