4 ms·
How about running the facebook javascript in a sandbox? Such as proxying the document.createElement and document.getElements* methods for the initial script whi
by codejoust 15y ago
How about running the facebook javascript in a sandbox? Such as proxying the document.createElement and document.getElements* methods for the initial script while breaking it for everything else?
- mkjones 15y agoThat's a good idea, and we actually thought about that. But assuming we need those APIs, what's to keep them from calling our wrappers around them? Put another way, how do we determine if the caller of some of our js is malicious or is us?
- jQueryIsAwesome 15y agoIt just needs to be non-predictable. Give the wrapper object and ALL his methods a random name for every session.