FW: Proposal: safeEval

doodad-js Admin doodadjs at gmail.com
Fri Jun 22 22:51:05 UTC 2018

This is silly.  I can want these without wanting them built using substandard tools.


That’s the point why I bring it to ES. Nothing on the “user land” can provide something reliable, apart a complete JS runtime library compiled to “WASM” or “asm.js”. And... that’s silly.



From: Mike Samuel <mikesamuel at gmail.com> 
Sent: Friday, June 22, 2018 6:04 PM
To: doodad-js Admin <doodadjs at gmail.com>
Cc: Isiah Meadows <isiahmeadows at gmail.com>; es-discuss <es-discuss at mozilla.org>
Subject: Re: FW: Proposal: safeEval



On Fri, Jun 22, 2018, 5:30 PM doodad-js Admin <doodadjs at gmail.com <mailto:doodadjs at gmail.com> > wrote:

“Blacklisting or whitelisting, that’s an open discussion”: It really isn't.


So for you, blacklisting or whitelisting is not opened to a discussion?


Case based reasoning doesn't work when the partition of cases can't be enumerated so if we want confidence in our tools we ought prefer whitelisting.

This email has been checked for viruses by AVG.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/es-discuss/attachments/20180622/6396211d/attachment.html>

More information about the es-discuss mailing list