[Bug 8125] Can it be specified somewhere that script can define a variable named "top" with 'var top' in a global context? This is currently inconsistent across browsers.

http://www.w3.org/Bugs/Public/show_bug.cgi?id=8125


Adam Barth <w3c@adambarth.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |w3c@adambarth.com




--- Comment #1 from Adam Barth <w3c@adambarth.com>  2009-10-29 23:46:13 ---
Letting script define a global variable named top is a security vulnerability. 
It's only inconsistent because I haven't gotten around to convincing everyone
of that fact yet.


-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Thursday, 29 October 2009 23:46:22 UTC