arvidkahl

19 ms·

1. 181.▲
   by arvidkahl 14y ago

   Your post was successfully analyzed as redundant.
2. 182.▲
   by arvidkahl 14y ago

   Could you please state the reasons for this change: 'cannot return a value from a constructor'. Besides breaking working code, this feels more like an added restriction than an added feature. I'd love to know why this is in 1.5. Thanks!
3. 183.▲
   by arvidkahl 14y ago

   If you take the output, put that into a file on a different (sub-)domain and request it as iframe src from there, you can use the Cross-Origin-Policy to your advantage und have window.parent only respond to window.postMessage(), not direct
4. 184.▲
   by arvidkahl 14y ago

   So it's a sandbox for the iframe, not a sandbox from the perspective of the parent window object. For that, it's very useful. Have you looked into the security/termination problems or are they not a neccessity for your project?
5. 185.▲
   by arvidkahl 14y ago

   I enjoy a simple little tool that makes embedding user content easier. However, the problem with user-generated JavaScript is not security, it's termination. To my knowledge, there is no 100% safe way to prevent a user script from locking u