Lonni Ingram

Investigate embedding Partytown via a cross-origin iframe

6

I believe that Partytown's isolation could be improved by embedding it via a cross-origin iframe rather than directly as a worker. # Problem Because the worker inherits the embedding page's...

Minified payload increased 6X by #111

2

We are working on our first LightStep integration and noticed that the [minified client](https://github.com/lightstep/lightstep-tracer-javascript/blob/b9a0031b88f692745defe66804d6c2bf9dcb9de9/dist/lightstep-tracer.min.js) is quite large, at 446KB. This seems to be a regression introduced by #111. Prior to...

Use hasOwnProperty to check for bucket existence

1

If a mapped observable has a value that is a property of `Object.prototype`, `findBucket` returns that property's value instead of a `simpleObjectLookup` instance. Fix #124

consecutive calls to `nom.parse` sometimes fail

2

Here's a minimal testcase. ``` javascript 'use strict'; var nom = require('nomnom'); nom.command('foo'). options({ bar: { list: true } }). callback(function (args) { require('assert'). ok(args.bar instanceof Array, 'bar should be...

James Mickens pointed out in the Q&A of my Usenix talk that the broker is vulnerable to prototype poisoning by guest code. The simplest solution to this problem is to...

Currently, we assume that the broker is running in `src/` and prepend all guest script URLs with `../`. This breaks absolute URLs and is generally inflexible. The sandbox should allow...

We need a spec

8

Currently, the Handlebars language is defined by the behavior of this reference implementation and incompletely described by the documentation found at handlebarsjs.com. This makes it very difficult to reason about...