3 ms·
Sadly, I stopped reading when they got to recommending eval as a method for running js received over xhr.
by geuis 17y ago
Sadly, I stopped reading when they got to recommending eval as a method for running js received over xhr.
- mattdawson 17y agoWhat's so bad about using eval in this context?
- blasdel 17y agoWith XHR's same-domain policy, the JS had to come from you -- using eval introduces no exploits that weren't already present.