Re: Another de-facto insecurity we need to fix in ES5

2009-06-15 Thread Brendan Eich
For ES5, this is a tempest in a teapot. We at Mozilla are trying to remove assignable __proto__ in a near-term release, except in these two useful and (AFAIK) safe cases: * A newborn with no other properties. * A recent-born in the midst of initialization via evaluation of its object initi

RE: Another de-facto insecurity we need to fix in ES5

2009-06-15 Thread Allen Wirfs-Brock
On the surface, this seems fairly reasonable., of course IE doesn't have any skin in the mutable __proto__ game. Would you really associate this with Object.freeze or would you make it a characteristic of the [[Extensible]] internal property being false? Personally, I'd probably be inclined t

Re: Another de-facto insecurity we need to fix in ES5

2009-06-15 Thread Douglas Crockford
Mark S. Miller wrote: As I just mentioned on the debugging API thread, at the last EcmaScript meeting we agreed On Mon, Jun 1, 2009 at 5:11 PM, Waldemar Horwat > wrote: Rather than describing the evil things that implementations do with F.caller, we agreed

Another de-facto insecurity we need to fix in ES5

2009-06-15 Thread Mark S. Miller
As I just mentioned on the debugging API thread, at the last EcmaScript meeting we agreed On Mon, Jun 1, 2009 at 5:11 PM, Waldemar Horwat wrote: > Rather than describing the evil things that implementations do with > F.caller, we agreed to just impose a blanket prohibition of code peeking > into

Re: debugging interfaces

2009-06-15 Thread Mark S. Miller
On Mon, Jun 15, 2009 at 5:06 AM, Jordan Osete wrote: > Hi everybody. > > I've wondered for some time if it weren't possible to harmonize stack > traces across browsers. > I have submitted a (simple) proposal on the WHATWG mailing list ( > http://lists.whatwg.org/htdig.cgi/whatwg-whatwg.org/2009-J

RE: Could this be removed from Array#concat.

2009-06-15 Thread Allen Wirfs-Brock
Also agree and will fix it. I haven't worked though all these sorts of editorial comments yet... From: es-discuss-boun...@mozilla.org [mailto:es-discuss-boun...@mozilla.org] On Behalf Of Thomas L. Shinnick Sent: Sunday, June 14, 2009 8:46 PM To: es-discuss@mozilla.org Subject: Re: Could this be

RE: Array#indexOf and Array#lastIndexOf question

2009-06-15 Thread Allen Wirfs-Brock
Agreed...I'll fix it. >-Original Message- >From: es-discuss-boun...@mozilla.org [mailto:es-discuss- >boun...@mozilla.org] On Behalf Of Brendan Eich >Sent: Sunday, June 14, 2009 9:45 PM >To: John-David Dalton >Cc: es-discuss@mozilla.org >Subject: Re: Array#indexOf and Array#lastIndexOf ques

Re: debugging interfaces

2009-06-15 Thread Jordan Osete
Hi everybody. I've wondered for some time if it weren't possible to harmonize stack traces across browsers. I have submitted a (simple) proposal on the WHATWG mailing list (http://lists.whatwg.org/htdig.cgi/whatwg-whatwg.org/2009-June/020359.html), and got somehow "redirected" here ;-) So he