W3C home > Mailing lists > Public > public-web-security@w3.org > March 2011

Re: Interaction with Workers (was Re: setTimeout error handling)

From: Brandon Sterne <bsterne@mozilla.com>
Date: Tue, 29 Mar 2011 14:45:40 -0700
Message-ID: <4D925304.8000909@mozilla.com>
To: gaz Heyes <gazheyes@gmail.com>
CC: Adam Barth <w3c@adambarth.com>, "sird@rckc.at" <sird@rckc.at>, public-web-security@w3.org
On 03/29/2011 01:39 AM, gaz Heyes wrote:
> I think String is a loose definition, for example what if we call
> setTimeout with an array or object?
> setTimeout(["alert(1)"])

Good lord, why does that work?  :-)

> IMO the spec should say any argument that isn't a function when related
> to setTimeout/setInterval

Agreed.  I will make this change as well, e.g.

s/called with a String argument/called with any argument other than a
Function object/g

-Brandon
Received on Tuesday, 29 March 2011 21:43:32 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 29 March 2011 21:43:32 GMT