rehanift/engine.js — Issue #8: Identify potential attack vectors
Author: rehanift
Created: 2012-01-05 16:53:40+00:00
State: open

This list has lots of potential ECMAScript vulnerabilities: http://code.google.com/p/google-caja/wiki/AttackVectors

My superficial understanding of "use strict" makes me think that some of these are non-issues, but more research is needed to verify.