Re: [Caja] Language-Based Isolation of Untrusted JavaScript

2009-05-11 Thread Brendan Eich
On May 11, 2009, at 3:14 PM, David-Sarah Hopwood wrote: can be accessed implicitly. However no 'toNumber' property is mentioned anywhere in the ECMAScript specs, and I don't know of any implementation-specific property of that name. Have I missed something, or is 'toNumber' a figment of the auth

Re: [Caja] Language-Based Isolation of Untrusted JavaScript

2009-05-11 Thread David-Sarah Hopwood
TobyMurray wrote: > Hi caja folks, > > I expect you're all aware of this but I wanted to mention a paper I > recently came across. > > There is some really interesting formal work being done on secure > [subsets] of JavaScript. The paper whose title is the subject of this > post is particularly re