Comments (3)
Comment #1 originally posted by mikesamuel on 2008-01-18T06:05:36.000Z:
What about the operand to typeof?
Should
typeof foo
=>
typeof .primFreeze(___OUTERS.foo)
?
from caja.
Comment #2 originally posted by erights on 2008-01-18T22:40:41.000Z:
On Jan 18, 2008 10:21 AM, Mike Samuel [email protected] wrote:
On Jan 17, 10:08 pm, "Mark Miller" [email protected] wrote:
Good point. It should not. And while we're thinking to enumerate such
things, neither should === or !==, whereas == and != should expand
operands. Hmmm. Getting kinda complex and hard to remember. ;(What's the rule of hand?
"of hand?"?
If an expansion could cause an implied valueOf or toString invocation,
then it needs to check frostiness?
At least. If an expansion could cause an access of any sort with a function's
properties other than one of the exempted initialization actions, then this must
cause the function to be frozen.
Thanks for prodding me to clarify this. In the process I realize that my proposed
exemption for instanceof is wrong. "x instanceof T" causes an access of
"T.prototype". Until the function is frozen this can change. Had Ihab implemented the
rule I'd proposed, this change would have been observable. I now realize that Ihab's
implementation is correct and my spec is wrong. I'm closing bug
http://code.google.com/p/google-caja/issues/detail?id=31 as Invalid.
from caja.
Comment #3 originally posted by mikesamuel on 2008-01-20T03:37:46.000Z:
But typeof still shouldn't be frozen, right
from caja.
Related Issues (20)
- playground: empty "cajoled source" HOT 1
- Allow <video autoplay muted> in sanitizer HOT 1
- HTML comments are removed by sanitize
- API documentation link is dead HOT 10
- "show in folder" in chrome/chomium downloads just opens folder in caja, but does not selects particular file HOT 3
- Content of iframe's not loading HOT 1
- Missing comma in css-whitelist.json HOT 1
- Html.Exploit.CVE_2016_3198-1 HOT 1
- "tel", "sms", and "geo" uri schemes stripped out HOT 1
- Uncaught TypeError: Cannot read property 'get' of undefined HOT 2
- Support Blob URLs and window.URL API HOT 3
- Documentation for hosting caja server HOT 5
- Error while processing the html HOT 2
- Caja does not make use of SMB2 FSCTL_SRV_COPYCHUNK HOT 1
- null pointer error HOT 2
- Compare strings with"==" or "!="
- csslexer lockup the browser HOT 1
- URI.prototype.getQuery may unexpectedly decode "%2B" to SPACE due to order of operations HOT 1
- [debug.js] TODO(erights): "Explore alternatives to using "instanceof Error" HOT 1
- Unreleased Resource: Streams
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from caja.