3 ms·
Caja / Secure EcmaScript should fix the JS-too-dynamic problem. I haven't tried it out yet.
by abecedarius 15y ago
Caja / Secure EcmaScript should fix the JS-too-dynamic problem. I haven't tried it out yet.
- amalcon 15y agoIt doesn't help in this case, since an attacker can just insert plain old JS. Caja (and similar things) only help for code you can actually put through the Cajoler. It's still a good, if imperfect, solution for other use-cases.