218Re: [caplet] ADsafe and bind
- May 22, 2008Douglas Crockford wrote:
> ADsafe will block the bind method. The bind method proposed for ES3.1Don't some of these libraries have other aliases for bind-like methods?
> is safe, but the bind methods provided by the current Ajax libraries
> are not because they can bind to the global object.
For example Prototype has 'bindAsEventListener', although I don't know of
any specific attack based on that in the context of ADsafe.
- << Previous post in topic Next post in topic >>