Allen Wirfs-Brock wrote:
ES 5 defines "foo:bar" as meaning [[DefineOwnPropertuy]].  Prior to the standardization 
of getter/setter semantics in ES5 some implementation used [[Put]] for "foo:bar".

They did that because ES3 mandated it!

This was indeed a bug in ES3.

   That was identified as a potentially (perhaps even actually) exploitable 
security issue.

Actually. See

http://hackademix.net/2009/01/13/you-dont-know-what-my-twitter-leaks/

prefigured by posts such as

http://jeremiahgrossman.blogspot.com/2006/01/advanced-web-attack-techniques-using.html

/be
_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss

Reply via email to