domenic at domenicdenicola.com (2014-01-24T20:01:12.903Z)
On Jan 20, 2014, at 9:39 AM, Brendan Eich wrote:
> Does this present a hazard for CSP, which provides policy controls governing Function?
Does CSP deal with `(function(){}).constructor` ?
CSP probably does needs to deal with this, as well as user defined subclasses of function (that super call the Function constructor).
Also assorted new ways of compiling/evaluating code from strings introduced by Module Loaders
On Jan 20, 2014, at 9:39 AM, Brendan Eich wrote: > Allen Wirfs-Brock wrote: >> It isn't clear that there much need for a global name for GeneratorFunction. If you really eed to access it can always get it via: >> >> (function *() {}).constructor > > Does this present a hazard for CSP, which provides policy controls governing Function? Does CSP deal with (function(){}).constructor ? CSP probably does needs to deal with this, as well as user defined subclasses of function (that super call the Function constructor). Also assorted new ways of compiling/evaluating code from strings introduced by Module Loaders Allen