> The thing is, it isn't just javascript eval; any eval is bad. I can think of a few good use cases (though outside the context of JIT). Consider something lik

> The thing is, it isn't just javascript eval; any eval is bad. I can think of a few good use cases (though outside the context of JIT). Consider something like Jinja where you can put python code in your template - we've used this to generate C++ source files from JSON metadata in our embedded systems products. In this case it's pretty safe because both the producer and consumer of the eval is the same person.