imageMapster.js has a javascript eval()

[pbchase]

This module fails the REDCap module security scanner with

root@7106e6952520:/var/www/html# ./bin/scan modules/imagemap_v0.0.0/
Running composer install in /var/www/html/redcap_v13.9.3/ExternalModules/

js/imageMapster.js:12 - Please avoid the javascript eval() function. It is not currently possible to ensure its safety via automated scanning.

@123andy, where is this JS file sourced? Can we get an update?

[123andy]

There are newer versions of ImageMapster -- https://github.com/jamietre/ImageMapster/blob/main/dist/jquery.imagemapster.min.js

I'll create a ticket to update it but it may take a little while to do it and test it... Happy to accept a PR :-)

[ChemiKyle]

eval still exists in imageMapster.js, but PSALM no longer complains about it.