Skip to content

Critical Security Vulnerability: Using eval() #97

Description

@shivanshiv

File: Blobbie.tsx

  • What's happening: eval() converts a string into executable code at runtime.
  • The issue: What if someone could control that string? What code could they make run?
  • Your task: Instead of using a string and [eval() try to have it so that we are storing them in a data structure

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions