Re: [whatwg/webidl] Can we change promise resolution behaviour to reduce security issues (Issue #1584)

mgaudet left a comment (whatwg/webidl#1584)

Not just a specific instance, but anything with the `then` property on the prototype chain. e.g. exploits will frequently define a `then` on `Object.prototype`. Animation is a good example, and has been hit a few times, but there are many places where this has tripped up developers of engines, and basically I don't think being able to synchronously run script any time any promise is resolved inside of spec algorithms is doing anyone any favours. 



-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/webidl/issues/1584#issuecomment-4145452803
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/webidl/issues/1584/4145452803@github.com>