Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Interpreter: Prevent evaluation of unsafe methods #3570

Merged
merged 1 commit into from Feb 28, 2023

Conversation

AMoo-Miki
Copy link
Contributor

While in a CSP-compliant environment, unsafe evals are blocked by the browser. However, in an unsafe environment, blocking these methods from being interpreted would prevent their evaluation.

@domoritz domoritz requested a review from jheer September 11, 2022 01:04
@AMoo-Miki AMoo-Miki force-pushed the interpreter-block-unsafe-methods branch 4 times, most recently from f457672 to 2ce49c7 Compare September 11, 2022 17:44
@joshuarrrr
Copy link

@jheer Is there any other context or information we can provide to help expedite the review of this PR?

@jheer jheer merged commit 8d4865d into vega:main Feb 28, 2023
@jheer
Copy link
Member

jheer commented Feb 28, 2023

Thanks!

@jheer jheer mentioned this pull request Mar 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants