Although there is some interesting work in trying to obtain security relevant guarantees from a script that isn't first, where a malicious script may instead have been first (link please if anyone has it), this work did not seem practical to me.
My POV: A realm starts out pervasively malleable. It can only provide practical protection to some scripts within the realm from other scripts in that realm if the first script loaded into that realm is not harmful to this cause, and if a script supportive of that cause (like initSES.js) is loaded before any scripts that may be harmful to that cause. On Sun, Jul 27, 2014 at 5:19 AM, Peter van der Zee <e...@qfox.nl> wrote: > On Sun, Jul 27, 2014 at 1:57 PM, David Bruant <bruan...@gmail.com> wrote: > > You can deeply freeze it yourself before any other script accesses it. > > That's already assuming you are first. You may not be without your > knowledge (ISP injection, virus hijack, garden gnomes, etc). At this > point you'll be too late. > > > My point being that there are ways to prevent any non-trusted scripts > from modifying Reflect > > And I guess I'm saying, "no, there isn't". > > It'd be nice if there was some kind of mechanic of detecting/ensuring > that some built-in is indeed a built-in. That would take away all of > this pain. Maybe including a system module could fix this issue. I > doubt I'm the first here to mention that though. > > - peter > -- Cheers, --MarkM
_______________________________________________ es-discuss mailing list es-discuss@mozilla.org https://mail.mozilla.org/listinfo/es-discuss