3 ms·

Careful, this code runs eval() on all spreadsheet fields. Someone can "collaboratively" steal your jsfiddle.net cookies.

• camus2 13y ago
  one could use a function constructor instead of eval to try to mitigate XSS.
• mintplant 13y ago
  The code runs on the fiddle.jshell.net domain.
  • Breefield 13y ago
    that's good :) did not realize
• fekberg 13y ago
  Yeah that was fun until I got an alert box in my face.