|
|
|
|
|
|
by bawolff
2011 days ago
|
|
|
Its pretty hard to imagine a situation where full access to the global scope (including DOM) is fine as long as the attacker doesn't have access to the current function's scope. Performance difference, sure, but safety difference is pretty far fetched. |
|
|