4 ms·
Why doesn't Firefox simply disallow eval? You would get an error in console explaining and that's it.
by angry-hacker 10y ago
Why doesn't Firefox simply disallow eval? You would get an error in console explaining and that's it.
- deleted 10y ago[deleted]
- kevingadd 10y agoLots of perfectly sensible JavaScript code uses eval for things like feature detection and runtime code generation. If you removed eval they'd just use 'new Function' instead, which has most of the same problems.
- AgentME 10y agoThere are legitimate uses of eval. And there are plenty of other ways for extensions to be insecure besides by using eval!