-
Notifications
You must be signed in to change notification settings - Fork 47
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve TypeScript/JS code evaluation security #67
Comments
@kennethcassel I want to give it a try :D |
Go for it @Rohithgilla12! |
I tried |
Okay should I install the quickjs library using npm? |
We're using Yarn as our package manager so you should do |
Is your feature request related to a problem? Please describe.
We are currently using
eval
to run the code. People strongly recommend against using it, though: Why is using the JavaScript eval function a bad idea?Describe the solution you'd like
@jsjoeio has linked some great resources and proposed an interesting solution here: #39. quickjs-emscripten is the one that interests us the most.
We can adapt this approach for TS, too because what we are ultimately doing is running JS code.
The text was updated successfully, but these errors were encountered: