Reflect.hasOwn() ?

Tom Van Cutsem at
Mon Jul 28 12:05:43 PDT 2014

2014-07-27 18:14 GMT+02:00 Mark S. Miller <erights at>:

> Although there is some interesting work in trying to obtain security
> relevant guarantees from a script that isn't first, where a malicious
> script may instead have been first (link please if anyone has it), this
> work did not seem practical to me.

Not sure if this is what you had in mind, but Sergio Maffeis has been
working on something along these lines:

DefensiveJS (DJS)

"DJS is a defensive subset of JavaScript: code in this subset runs
independently of the rest of the JavaScript environment. When propertly
wrapped, DJS code can run safely on untrusted pages and keep secrets such
as decryption keys."

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the es-discuss mailing list