ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else

ECMAScript 6, in short ES6, has been boiling in a copper pot for many years by now and step-by-step, browser vendors come forward to taste the first sips of this mystery soup. So, ES6 is no longer a theoretic language but already crawled across the doorstep and now lurks under your bed, ready for the nasty, waiting for the right moment to bite. Now, what is this whole ES6 thing? How did it develop

[nishitki]

ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sa…

[efcl]

ES6とXSSについてのスライド。 ES5環境を想定した判定を破る可能性、Template Stringsと関数実行、新しいシンタックスでのXSSフィルターのバイパス、Symbolsとクロスドメインでの影響、Computed propetiesやデフォルトパラメータの悪用

[moguno]

DJ TOFUMENTAL wrote: へー / ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else http://t.co/Gev46lLjOp