> There was what amounts to an "ACL" issue It's a capability leak. <https://erights.org https://erights.org> > Well, no one replaced anything with javascript.

> There was what amounts to an "ACL" issue It's a capability leak. <https://erights.org https://erights.org> > Well, no one replaced anything with javascript. They did. They replaced the process for implementing VM internal operations with a process where VM internals are partially written in JS itself. If the sequence that the spec calls "GatherAsyncParentCompletions" had been implemented in C++, this leak wouldn't have occurred, because they would have been using an idiomatic list type (whether language-idiomatic, or a specialized data type standardized across the codebase), instead of a JS array.