__proto__ and JSON
gazheyes at gmail.com
Thu May 31 01:37:07 PDT 2012
On 30 May 2012 14:52, Brendan Eich <brendan at mozilla.com> wrote:
> Felix Böhm wrote:
>> Okay, fair point. But JSON.parse should do what it's name says: Parse
>> JSON. Ignoring keys is not an option.
> JSON.parse must not treat __proto__ specially, per ES5. What's the problem
> you see?
__proto__ can remove all methods for an object, this could cause a whole
block of code to fail when using a property from the JSON object. For
example using valueOf/toString with any property that has a null proto.
x=x.y+''; // I'm gonna bail because I have no toString
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the es-discuss