@@toStringTag spoofing for null and undefined

Gary Guo nbdd0121 at hotmail.com
Sat Jan 24 06:11:51 PST 2015


Now I have a tendency to support the suggestion that cuts the anti-spoofing part. If coder wants to make an object and pretend it's a built-in, let it be. The anti-spoofing algorithm could not prevent this case:```Object.prototype.toString = function(){  return '[object I_Can_Be_Anything]';}``` 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/es-discuss/attachments/20150124/409db64d/attachment.html>


More information about the es-discuss mailing list