Skip to content

Remove use of Function constructor #51

@sno2

Description

@sno2

Hello, deno-dom uses this library to emulate the DOM in Deno. However, executing JavaScript from strings can result in possible insecure security flaws within code. As a result, secure web platforms such as Deno Deploy have disabled string code execution, which makes nwsapi.js unusable in secure contexts due to its use of the Function constructor for codegen in nwsapi.js, I am going to try and fix this later today after I get home but just going to create an issue in response to another issue in the deno-dom repo about deno-dom not working on Deno Deploy.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions