E and harden

[dckc]

It’s E(target)(…args) that hardens args. -- @michaelfig

[dckc]

The general rule is:

all objects made by literal expressions (object literals, array literals, the many forms of function literals) must be tamper-proofed with harden before they can be aliased or escape from their static context of origin -- https://github.com/endojs/Jessie#must-freeze-api-surface-before-use

As a practical concession, since any call to E(target).method(...args) may be remote, we automatically harden the args, since @endo/marshal requires it inputs to be hardened.

[Tyrosine22]

This seems to be correctly documented now.

[dckc]

I don't see it in the eventual send section. Where is it?

[dckc]

41469e7 looks like a keeper

[dckc]

@yribero ran into this today... got "not writeable"