3 ms·
Final follow-up: a more-exhaustive search also returned no evals in build.js files, nor any obviously-suspicious strings.
by thenewwazoo 8y ago
Final follow-up: a more-exhaustive search also returned no evals in build.js files, nor any obviously-suspicious strings.
- vincnetas 8y agoHave you checked for \u0065val or e\u0076al or any other combination of it?
- sillysaurus3 8y agoThis is impossible in general. eval === this[[1,18,-3,8].map(x=>String.fromCharCode(x+100)).join("")] https://jsfiddle.net/hkvu9s47/ https://jsfiddle.net/hkvu9s47/
- vincnetas 8y agoThat's the point. That just checking for occurrences of strings like 'eval' just gives you false sense of security.