Re: [whatwg/webidl] Can we change promise resolution behaviour to reduce security issues (Issue #1584) from Matthew Gaudet on 2026-03-27 (public-webapps-github@w3.org from March 2026)

From: Matthew Gaudet <notifications@github.com>
Date: Fri, 27 Mar 2026 14:40:33 -0700
To: whatwg/webidl <webidl@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/webidl/issues/1584/4145470520@github.com>

mgaudet left a comment (whatwg/webidl#1584)

As to test coverage... there is [some](https://github.com/tc39/proposal-thenable-curtailment/issues/7), but I would be deeply unsurprised to discover that it's heavily un-covered. 

I should also emphasize: There's a benefit to -specification authors- here too. It's equally easy or a specification to become incoherent in light of thenables; [ECMA262 has has this happen](https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r), and [Streams made updates to deal with this](https://github.com/whatwg/streams/pull/1326). 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/webidl/issues/1584#issuecomment-4145470520
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/webidl/issues/1584/4145470520@github.com>

Received on Friday, 27 March 2026 21:40:37 UTC