Message from JavaScript talks
June 2017
— So symbols work like this:
if you have a reference to the symbol instance (priv in this case), you can access a prop referenced by that symbol, otherwise, you have no access to this[priv]
Meaning if I had a reference to priv in another file, I could do myInstance[priv] and have access to the "private" variables
— But I don't, because of IIFE
— Which MEANS only statics AND instance methods within the class definition itself have access to private vars
— And NOT external (modified in runtime for example) instance methods:
MyClass.prototype.foo = [rogue function]
— Which means that the new syntax offers no new attack surface
— There is a buitin for getting all symbols, isn't there?
— WAT
— Yeah, I remember reading about it on MDN
— This does make sense
— Well, symbols is only one method
— I could also have used WeakMap