Question

Calling the setTimeout function will return an integer ID so that clearTimeout can be called with that ID.

What happens if setTimeout gets called more times than there are positive integers in JavaScript? Is there a security issue?

Answer 1

Found the relevant code in Chrome:

static int timeoutId()
{
    static int lastUsedTimeoutId = 0;
    ++lastUsedTimeoutId;
    // Avoid wraparound going negative on us.
    if (lastUsedTimeoutId <= 0)
        lastUsedTimeoutId = 1;
    return lastUsedTimeoutId;
}

Thus, Last ID will be just 1 after no positive integers remaining.