comp.lang.javascript Google Group

Re: Security risk to eval?(NO sql)

2009-11-25T08:51:15Z

...
There was a typo in my entry, should be: NO sql- files.

Re: new Array(76)

2009-11-25T08:50:38Z

Yes, thanks, I saw it also yesterday, and after that (my previous last
comment) showed the code-chain how `Array(len)` is handled, it's about
`Object* obj = NumberDictionary::Allocate(len gth);`. And also saw
`kMaxObjectSizeInNewSpace`, about 512Mb exactly I have in used when
Chrome showed it's toolbar about that script eats much memory

Re: Security risk to eval?

2009-11-25T08:44:39Z

optimistx wrote on 25 nov 2009 in comp.lang.javascript:
Not javascript related.

A programmar [are you one?] should always be able to imagine.

You are mixing the concepts of user and client making your Q nonsensical.
Everyone blames the programmer, and rightly so.
Withhout programmers, who would there be left to blame in cyberspace?

Re: Can script determine if window.onload has already fired?

2009-11-25T08:42:05Z

I think that this problem might be more complicated than you think ;)
Please consider all cases - together with lazy load :)

Re: Microsoft and attributes--will they ever figure them out?

2009-11-25T08:28:28Z

That's why you have to test whether style changes affect the DOM
immediately and as expected. If not, you skip any enhancements that
rely on that happening.
That is interesting.
Good. Maybe they will switch to that. :)
Page not found. :( I would like to see the results posted for this
device.

Security risk to eval?

2009-11-25T07:41:27Z

Assume:
1) A programmer has written a htlm page with javascript code, which is
loaded to and executed in client's computer.
2) The http-server, which is sending the page, does not execute php, does
not use ajax, does not use passwords, has sql-files (=the most typical
server serving simple pages to clients). http-get-requests are used.

Re: Microsoft and attributes--will they ever figure them out?

2009-11-25T07:37:36Z

[snip]
Blackberry browser is default browser for Blackberry device. It is a
totally unique browser with its own rendering engine.
Javascript is turned off, by default. Older versions of Blackberry
shipped with CSS off by default.
It has some really weird javascript bugs in it, some very undesirable

Re: What is a software engineer?

2009-11-25T06:15:17Z

[snip]
That is exactly what I'm talking about with pedantic snits.

Re: What is a software engineer?

2009-11-25T05:54:41Z

You clearly don't know what you are talking about.

Yes, you should have. In any case, anybody aware of how `eval' would work
in current implementations would never be blindly eval()ing XHR responses,
regardless of what ES5 has to say about it.
No, I got me an assistant for that :->

It wasn't, fool. Maybe that's what you thought, but not what you wrote.

Updated FAQ

2009-11-25T05:47:05Z

* Remove entry for window.status
(G Smith, despite mild objection)
* modified and cleaned up the DC meta tags
(Thomas)

Re: FAQ Topic - How can I access the client-side filesystem? (2009-11-19)

2009-11-25T05:27:37Z

I doubt anyone is trying to do that; that would obviously be impossible.
Javascript cannot access the local file system. Allowing javascript to
access the filesystem would be a huge security hole.
Synchronous file reading was possible in Firefox. The API is undergoing
redesign so that it reads asynchronously[1]. This is being designed so

Re: What is a software engineer?

2009-11-25T04:59:15Z

^^^^^^^^^^^^^^^^^^^^^^^^
uh, "given an items object says there is.
The example posted is a string. That string could have been fetched via
XHR, which can be eval'd. I should have mentioned that.
Did you figure that out all by yourself?
The intention of the hypothetical example is using a user-defined object

Re: What is a software engineer?

2009-11-25T04:57:37Z

Re: What is a software engineer?

2009-11-25T02:22:03Z

1. There is no `items' object. There is, at most, a property with
that name that stores a reference to an object.
2. What does this have to do with importing "script source text"?
Would you not want to use source code in a template in the same
context in which you included it, as in other languages? The

Re: Can script determine if window.onload has already fired?

2009-11-25T00:28:57Z

And, as mentioned, there is no magic property to determine if the
document has loaded. End of story for those examples.
Yeah, that's the one you came up with, so that's the one I responded
to.