I love WebAssembly and I don't agree with GP at all here, but this prevailing holier-than-thou attitude of "You shouldn't complain or poke holes in things unless you're willing to fix them yourself" is just silly, so I down-voted you.
Trying to poke holes in things, or raising concerns about them, is contributing. I would rather hear other people's arguments (even if I don't agree with them) than silence them on the grounds of "let's see you do better n00b".
Could we please drop this "if you see a problem just contribute" and switch to "if you can contribute then please do"?
I have a feeling that this is a common way in the OSS community to dismiss suggestions, ideas and criticism instead of taking them into account, feel free to correct me if this isn't the case.
EDIT: Seems I'm not the only one that's annoyed by this.
They’ll have to wait in line. My time is far too valuable to give it away. I have tremendous things to accomplish.
Actually, I would be surprised if a vuln creeps its way into a builtin. Most of the runtime should be stateless, and regex exec was the only one I could think of that might do some fancy memoization. But I hear it’s fun to collect a paycheck at pwn2own.
