It's been shown you can write pretty much any javascript code using operator symbols only (so things like +[]_) without any alphanumeric characters making it pretty much imposible to filter.
User inputed javascript is pretty much impossible to make safe.
As someone who has only had a cursory learning of JavaScript, I predicted correctly. The concept of overriding is known to me, although it's clearly in a slightly different context here and that 010 is 8 in octal I knew since I learned C.
I gather that JavaScript has a lot of quirks (eg: '==' vs '===' if I'm not mistaken) but I don't feel like these are too.
True. But you they can use a "known Symbol" to implement this feature.
reply