@@toStringTag spoofing for null and undefined

Brendan Eich brendan at mozilla.org
Tue Jan 20 14:36:49 PST 2015


Mark S. Miller wrote:
>
>     IIRC David Ungar's question to Tom was "why not enable proxies to
>     mega-program every base-level operation in the language?" I took
>     this to mean nothing like a nominal type check could evade
>     proxying, in David's vision. Is this plausible in your view?
>
>
> No it is not. It destroys the whole point of branding if passing a 
> brand check guarantees nothing.

The counter-argument I inferred from the Q&A (this was in 2011, IIRC you 
were there too ;-) would answer in two parts:

1. Needless-nominal type tests should be replaced by structural-type tests.

2. Any remaining brand or trademark test can use object identity or 
equivalent unforgeable capability.

(2) can't be meta-programmed to spoof identity. But it doesn't leave 
anything like nominal types as found in many languages lying around as 
an attractive nuisance (and how, in Java!).

Now plausible?

/be


More information about the es-discuss mailing list