Kevin Curtis wrote: > David-Sarah, > > Jacaranda is - I think - a DSL which is not a subset of JS.
No, it's a subset of JS (like most of the other languages mentioned -- Caja/Cajita, FBJS, ADsafe etc.) > How do you anticipate jacaranda programs being delivered to the browser. Either: - verify on the server/proxy, and deliver the verified program as-is (with the Jacaranda runtime library), or - tag the program as Jacaranda and have a browser add-on verify it before execution. The value of the AST format here would be in potentially *greatly* simplifying some future version of the verifier, by allowing an existing parser to be reused. That would however depend on an assessment of whether browser implementors had succeeded in implementing secure and correct ES5->AST parsers (with a mode that accepts exactly ES5 as specified, not ES5 plus undocumented cruft and short-cuts for edge cases). -- David-Sarah Hopwood ⚥ http://davidsarah.livejournal.com
signature.asc
Description: OpenPGP digital signature
_______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
