endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES
Apache License 2.0
804 stars 71 forks source link

fix(exo): update `M.callWhen` broken by `M.raw()` #1859

Closed michaelfig closed 10 months ago

michaelfig commented 10 months ago

closes: #1858

Description

Correct the outdated implementation of M.callWhen that didn't account for changes made in #1831.

Security Considerations

Needs careful examination, since method guards provide an essential barrier to protect against misuse.

Scaling Considerations

n/a

Documentation Considerations

n/a

Testing Considerations

A small unit test to demonstrate the problem now passes with the updated code.

Upgrade Considerations

n/a