From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 30214 invoked from network); 16 Nov 2020 03:36:00 -0000 Received: from hurricane.the-brannons.com (2605:2700:0:17:a800:ff:fe3e:bc77) by inbox.vuxu.org with ESMTPUTF8; 16 Nov 2020 03:36:00 -0000 Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by hurricane.the-brannons.com (Postfix) with ESMTP id E30DD21DE05 for ; Sun, 15 Nov 2020 19:35:53 -0800 (PST) X-Greylist: delayed 454 seconds by postgrey-1.37 at hurricane; Sun, 15 Nov 2020 19:35:52 PST Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) by hurricane.the-brannons.com (Postfix) with ESMTPS id 551A977AF7 for ; Sun, 15 Nov 2020 19:35:51 -0800 (PST) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 2A4395C00DF; Sun, 15 Nov 2020 22:28:16 -0500 (EST) Received: from imap35 ([10.202.2.85]) by compute5.internal (MEProxy); Sun, 15 Nov 2020 22:28:16 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= mime-version:message-id:in-reply-to:references:date:from:to:cc :subject:content-type; s=fm1; bh=asd71ul7Fs3uTixtbpKjQMqqvmawtQZ MAKCl2Euo244=; b=SgauVGwUME5/0mgIk53lEt+dEbM71PNPcqIfpK39N8e5tgW 0Sfl/hfJ7Mc5zfDOlWNUI/VKl9gpE9rvaRaGotl9TK9HWd7sHB6+/G4Dx2YPXcmz oO1FziIi+bSpefksU8gaIlHnDVFDTFKjW2xfk/pihrq8MaCJm5OkVV0Pb6ZsQfZM 978ffiQpDLC/YRK1jz1onuVe9jEOe89IgSQhpYIkZtQINfENgT8PBaUczkgUuy6t PkkJphtkzJA3PrUkehtIs/I5MambfFtmwJbYgPvCNWOeZ0Qx+HG1GBOP+OfXJKVV yU8NA0XiRrshbQah/N/8BlLBEhPMafZTiGe8/dA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=asd71u l7Fs3uTixtbpKjQMqqvmawtQZMAKCl2Euo244=; b=ZbTnle4R1X/dihb1d3Gh1q nq30Qu/tb8hJPxBlImRkpDtTcfxYNRw0qpLB7m+0WgEdltB5l5T6q9EWa6ScKOAr Q7svVrE6yhCXSM7tOvxKvSmE6wdB5aG4Y5XgokY21pGDVICmaybzgpzPkywv4+Yd QjNMHCZrSDkYufE8rEX1uVhD3kZZ+qKp57cLxtt/8JRh0ShpiZfjOCsJILlL7xfF rGUnuadXAM6Z864yp9dsqJQUCSRkz4QKAxr6Ftxndq2hqehZT4XY8zDT8ocbkDSj SsChK0v3GldUaDtYfGAGtYjb2RKceLRojWIZqXWr/8mARTBdNWVyg8/CZd87itEw == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedujedrudeftddgiedvucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfggfkjghffffhvffutgesthdtredtreertdenucfhrhhomhepfdfmvghv ihhnucevrghrhhgrrhhtfdcuoehkvghvihhnpggtrghrhhgrrhhtsehfrghsthhmrghilh drfhhmqeenucggtffrrghtthgvrhhnpeeliedvveeflefgtdeiteeiveetleeuleekvdfh hefgvedulefhledvgeelffefueenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehkvghvihhnpggtrghrhhgrrhhtsehfrghsthhmrghilhdrfhhm X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 36DA914C00B3; Sun, 15 Nov 2020 22:28:15 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.3.0-570-gba0a262-fm-20201106.001-gba0a2623 X-BeenThere: edbrowse-dev@edbrowse.org List-Id: Edbrowse Development List Mime-Version: 1.0 Message-Id: In-Reply-To: <20201115122657.GA10863@toaster> References: <20201005232257.eklhad@comcast.net> <20201109231116.GB4369@toaster> <20201009202834.eklhad@comcast.net> <20201115122657.GA10863@toaster> Date: Sun, 15 Nov 2020 19:27:31 -0800 From: "Kevin Carhart" To: "Adam Thompson" , "Karl Dahlke" Cc: edbrowse-dev@edbrowse.org Subject: Re: [edbrowse-dev] interwindow bleed Content-Type: text/plain Hi Adam > As a question, what is the promise stuff they're lacking? It looked like > they implemented this but I really don't know js enough to have an opinion. It could be any and every ES6 feature. Adoption is increasing as time goes by. In July I worked on nasa.gov and got it working again. Between July and now, they wrote in all kinds of ES6. One example is a new use for the backtick symbol in place of quotation marks. It's used in JS somewhat analogous to the use of backticks in bash etc. So now nasa is broken again because of something you can't write a JS shim for. (I've heard of transpiling to ES5, but I don't know how to do it or whether it's something we could do on the fly.) Various sites are using 'let' a lot more. We were working with dominos.com and they need postMessage. We wrote a JS implementation of that one. There's also the function bodies. This one isn't ES6-related. moz and v8 allow toString() of a function and return the source JS. We think this is needed if we were to get ambitious and support paypal.com. We spent a few weeks on it and solved several things but then ran into the buzzsaw of an obfuscated file they use which even has "traps". And function bodies is part of what it's trying to detect. It's too bad. duktape is terrific. They don't not have the features, they're just someplace in the middle. I think probably due to the massive amount of work it takes to incorporate them. Kevin