W3C home > Mailing lists > Public > public-web-security@w3.org > November 2012

Re: CSP 1.1 DOM design

From: Cameron McCormack <cam@mcc.id.au>
Date: Tue, 06 Nov 2012 09:46:08 +1100
Message-ID: <509841B0.4030005@mcc.id.au>
To: Boris Zbarsky <bzbarsky@MIT.EDU>
CC: Alex Russell <slightlyoff@google.com>, public-web-security@w3.org
Boris Zbarsky:
> I don't see how the latter can really work.  As a simple example, if I
> grab a setter out of a property descriptor and then later call it, which
> code's strict mode is relevant?  The code that grabbed the setter or the
> code that called it?  Is there anything that requires an ES impl to
> actually keep track of strict mode for function calls?  Because I don't
> think Spidermonkey does anything like that....

That's an interesting question, but I don't think it's anything 
different from trying to assign to a setter-less accessor property from 
a strict mode <script> versus a non-strict mode <script>.  It's just 
going to look at whether the calling code is in strict mode or not.
Received on Monday, 5 November 2012 22:46:42 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:20 UTC