Alexey
Alexey
> Several keywords can accept a relative URI-reference, or a value used to construct a relative URI-reference. For these keywords, it is necessary to establish a base URI in order...
CRUD is already abstracted from collection/models, via `#sync` alias. If you don't want any network activity even possible, you can instantiate your own base models with `sync` method mocked. ```js...
I think #4224 was valid. Backbone should check for hasOwnProperty, when accessing model by id that is same as some builtin method. It could be possible attack vector aswell, if...
I think we should ask "do we handle it correctly _when_ it happen"
Lets imagine that user app is somehow wanted `__proto__` as model id. What would be correct behavior in that case? I think it would be correct to return model with...
One of my project was once pwned with `__proto__` poisoning I had "wonderful" 4 hours of debugging trying to figure out how this works
`Object.create` supported since ie 9. I see that it is a minimal version in tests. Where is IE support declared?
Seems like IE8 support was dropped since #4008
IE8 support already broken for router, may be for other parts too, see #3623 Also #4008 clearly set vector for removing old ie hacks, not to support the further
If you have to manipulate attributes before sending, why not pass already manipulated object in `attrs`?