I don't know if this is why they have that, but that would make a pretty decent approach to restricting and slowing down XSS type attacks, if you can override and protect all the native built-in functions.
It should be easy using log analysis to then notice spikes in usage of something, and investigate.
I'm sure there are flaws in my idea, but I think it might work as part of a defense in depth approach.
It should be easy using log analysis to then notice spikes in usage of something, and investigate.
I'm sure there are flaws in my idea, but I think it might work as part of a defense in depth approach.