@@toStringTag spoofing for null and undefined
Gary Guo
nbdd0121 at hotmail.com
Sat Jan 24 06:11:51 PST 2015
Now I have a tendency to support the suggestion that cuts the anti-spoofing part. If coder wants to make an object and pretend it's a built-in, let it be. The anti-spoofing algorithm could not prevent this case:```Object.prototype.toString = function(){ return '[object I_Can_Be_Anything]';}```
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/es-discuss/attachments/20150124/409db64d/attachment.html>
More information about the es-discuss
mailing list