On Scope And Prototype Security

Brendan Eich brendan at mozilla.com
Tue Mar 19 13:13:44 PDT 2013


Andrea Giammarchi wrote:
> It is not possible to secure or make a class hidden, it was possible 
> before the introduction of __proto__ and Object.getPrototypeOf in ES3, 
> now this is gone, and this was my security concern.
> ...
> Again, it was possible, now it's not possible anymore.

By "anymore" you mean since 1998 or so? __proto__ is very old.

/be


More information about the es-discuss mailing list