- From: <bugzilla@jessica.w3.org>
- Date: Sat, 05 Mar 2011 16:32:13 +0000
- To: public-script-coord@w3.org
http://www.w3.org/Bugs/Public/show_bug.cgi?id=12248 --- Comment #3 from Boris Zbarsky <bzbarsky@mit.edu> 2011-03-05 16:32:13 UTC --- Brendan, as long as evaluation order is defined, and as long as all DOM APIs that take such objects specify exactly what happens in "evil" getter cases (closes window, spins event loop, reenters this API, whatever), it's fine. But that's a pretty noticeable specification and implementation burden... The other option is to leave behavior in such cases undefined, except implementors still have to worry about it. We've certainly had at least one security issue in Gecko so far due to this sort of thing. -- Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
Received on Saturday, 5 March 2011 16:32:15 UTC