... Caja is a great idea, but it has some large fundamental limitations. As I see it, since the code is transformed irreversibly it is significantly harder to...
I don't think the transformation has that big of a cost. Debugging isn't that bad since you can debug before transformation, and transformation doesn't affect...
2010/5/24 adam.kumpf <adam.kumpf@...> ... ADsafe is a beautiful piece of work and you are right about transformation having downsides. Our strategy thus...
... Thanks for the additional clarity of the evolving ADsafe/Caja landscape. You and Doug are both on to a fundamental shift in how the web works, and more...
2010/5/26 adam.kumpf <adam.kumpf@...> ... Mark (CCed) can correct me if I say anything wrong. ECMA approved EcmaScript 5 which has a strict mode removes...
327
Mark S. Miller
erights@...
May 27, 2010 1:53 am
Caution: I tend to err on the side of too much detail. Apologies in advance. ... We are always very happy to hear when others come think in these terms as ...
Mark and Mike, This is really a great discussion -- thanks for detailing out the current state of ECMA Script 5, SES, and the overall feel of where things are...
... The source is out there, and you are certainly welcome to adapt it. My energies are now focused on repairing ECMAScript and HTML/DOM, ultimately making...
330
Mark S. Miller
erights@...
May 30, 2010 1:14 am
... Hi Adam, we are tracking the ES5 implementations in progress at ...
JSLint now enforces the prohibition on _ in string literals in the key position of object literals. Thanks to Joe Politz of Brown....
332
Mark S. Miller
erights@...
Aug 30, 2010 10:12 pm
May crash your browser or page: http://es-lab.googlecode.com/svn/trunk/src/ses/index.html <http://es-lab.googlecode.com/svn/trunk/src/ses/index.html>Sources at...
333
Mark S. Miller
erights@...
Aug 30, 2010 11:39 pm
... Minified and gzipped that is. ... -- Cheers, --MarkM...
ADSAFE.lib now subjects its name parameter to the same rules used generally on properties. Ankur Taly had discovered an attack by using a particular banned...
Hi all, In the adsafe.js I found that the reject_name(name) function is used at three location in this "procedural" form. Ex. at line 1087 : getStyle: function...
I mean calling the reject_name function with a name it returns true or false. For instance if I call reject_name('constructor') than i will get true because ...
I updated the ADsafe DOM interface. Previously, a method like .getValue() could return undefined a single value an array of values depending on the number of...
On behalf of the workshop co-chairs and program chair, we would like to invite you participate in the 5th annual workshop on Web 2.0 Security and Privacy....
Reminder: The submission date is March 25, two weeks from tomorrow. On behalf of the workshop co-chairs and program chair, we would like to invite you...
Final reminder! Submissions are due next Friday. Thanks. On behalf of the workshop co-chairs and program chair, we would like to invite you participate in the...
ADsafe took a big usability hit when the Firefox[-6] bug was discovered. ADsafe took the necessary but highly undesirable step of outlawing the use of the []...
Care to post a citation for the Firefox[-6] bug? Google doesn't do a very good job searching for [-6]. Sounds pretty bizarre, if -1, -3, and -6 are special. ...
W2SP 2012 CFP - Web 2.0 Security and Privacy 2012 Workshop Call for Papers On behalf of the workshop co-chairs and program chair, we would like to invite you...
