wouldn't it be possible for the attacker to alter the meaning of 'while' beforehand?
back
1 comments
The assumption is that a browser won't let you re-define the meaning of low-level constructs like "while" and "1". The assumption is somewhat reasonable, but it could be violated in the future, which is why the Browser Security Handbook advocates against it.
+1 thank you for the clarification