- From: Boris Zbarsky <bzbarsky@MIT.EDU>
- Date: Fri, 07 Dec 2012 15:09:23 -0500
- To: public-script-coord@w3.org
On 12/7/12 3:00 PM, Boris Zbarsky wrote: > On 12/7/12 2:43 PM, David Bruant wrote: >> I've just been thinking about this question more. Consider: >> * a WindowProxy instance w proxies to windowA >> * A non-configurable property 'whatever' is set on windowA through w >> (value is not important, but non-configurability is) >> * WindowProxy proxies to a different windowB object >> >> is 'whatever' a property of windowB? of the WindowProxy object itself? > > It has to be windowB to avoid cross-site information leakage.... Er, more precisely... To avoid cross-site issues reading the property from an origin that's not the same as windowB should throw after the above steps. And reading it from the origin of windowB should report no property. -Boris
Received on Friday, 7 December 2012 20:09:59 UTC