This is announcement of the call for papers for the fourth in a series of successful workshops on topics related to security and privacy for Web 2.0. This...
A quick reminder... This is announcement of the call for papers for the fourth in a series of successful workshops on topics related to security and privacy...
313
Mark S. Miller
erights@...
Apr 13, 2010 12:44 am
Call for Papers / Call for Participation: First workshop on Decentralized Coordination of Distributed Processes (DCDP 2010) http://soft.vub.ac.be/events/dcdp ...
... CanvasRenderingContext2D ... dangerous!! ... include the canvas element). Although the returned type is no longer a CanvasRenderingContext2D. Trying to...
A final reminder... W2SP 2010: Web 2.0 Security and Privacy 2010 Thursday, May 20 The Claremont Resort, Oakland, California Web site: http://w2spconf.com/2010 ...
... Caja is a great idea, but it has some large fundamental limitations. As I see it, since the code is transformed irreversibly it is significantly harder to...
I don't think the transformation has that big of a cost. Debugging isn't that bad since you can debug before transformation, and transformation doesn't affect...
2010/5/24 adam.kumpf <adam.kumpf@...> ... ADsafe is a beautiful piece of work and you are right about transformation having downsides. Our strategy thus...
... Thanks for the additional clarity of the evolving ADsafe/Caja landscape. You and Doug are both on to a fundamental shift in how the web works, and more...
2010/5/26 adam.kumpf <adam.kumpf@...> ... Mark (CCed) can correct me if I say anything wrong. ECMA approved EcmaScript 5 which has a strict mode removes...
327
Mark S. Miller
erights@...
May 27, 2010 1:53 am
Caution: I tend to err on the side of too much detail. Apologies in advance. ... We are always very happy to hear when others come think in these terms as ...
Mark and Mike, This is really a great discussion -- thanks for detailing out the current state of ECMA Script 5, SES, and the overall feel of where things are...
... The source is out there, and you are certainly welcome to adapt it. My energies are now focused on repairing ECMAScript and HTML/DOM, ultimately making...
330
Mark S. Miller
erights@...
May 30, 2010 1:14 am
... Hi Adam, we are tracking the ES5 implementations in progress at ...
JSLint now enforces the prohibition on _ in string literals in the key position of object literals. Thanks to Joe Politz of Brown....
332
Mark S. Miller
erights@...
Aug 30, 2010 10:12 pm
May crash your browser or page: http://es-lab.googlecode.com/svn/trunk/src/ses/index.html <http://es-lab.googlecode.com/svn/trunk/src/ses/index.html>Sources at...
333
Mark S. Miller
erights@...
Aug 30, 2010 11:39 pm
... Minified and gzipped that is. ... -- Cheers, --MarkM...
ADSAFE.lib now subjects its name parameter to the same rules used generally on properties. Ankur Taly had discovered an attack by using a particular banned...
Hi all, In the adsafe.js I found that the reject_name(name) function is used at three location in this "procedural" form. Ex. at line 1087 : getStyle: function...
I mean calling the reject_name function with a name it returns true or false. For instance if I call reject_name('constructor') than i will get true because ...
I updated the ADsafe DOM interface. Previously, a method like .getValue() could return undefined a single value an array of values depending on the number of...
