Subj : Re: object serialization
To   : netscape.public.mozilla.jseng
From : Jens Thiele <karme@unforgettable.com>
Date : Wed Mar 24 2004 10:42 pm

Brendan Eich wrote:
> Brendan Eich wrote:
> 
>> You can turn on JS_HAS_XDR_FREEZE_THAW via jsconfig.h.  If you want it
>> on by default, you'll be opening up potential (not known) security
>> holes.  It really should be configured on 
> 
> 
> *only*
> 
>> for embeddings that trust all scripts and the strings they thaw.
>>
>> /be
=> this is not an option for me

other solutions?
perhaps a pure javascript solution out there?

karme

.