Reflect.hasOwn() ?

Peter van der Zee ecma at qfox.nl
Sun Jul 27 05:19:44 PDT 2014


On Sun, Jul 27, 2014 at 1:57 PM, David Bruant <bruant.d at gmail.com> wrote:
> You can deeply freeze it yourself before any other script accesses it.

That's already assuming you are first. You may not be without your
knowledge (ISP injection, virus hijack, garden gnomes, etc). At this
point you'll be too late.

> My point being that there are ways to prevent any non-trusted scripts from modifying Reflect

And I guess I'm saying, "no, there isn't".

It'd be nice if there was some kind of mechanic of detecting/ensuring
that some built-in is indeed a built-in. That would take away all of
this pain. Maybe including a system module could fix this issue. I
doubt I'm the first here to mention that though.

- peter


More information about the es-discuss mailing list