Jexl icon indicating copy to clipboard operation
Jexl copied to clipboard

Published 20 hours ago • verified publisher icon TomFrost

Security? does it use actual JS eval function?

Open hassan-jahan opened this issue 2 years ago • 1 comments

Hi,

Thank you for your great work,

One question does it use actual js eval or Function or have access to global JavaScript objects. Is it safe to use this for user inputs?

hassan-jahan avatar Apr 10 '22 15:04 hassan-jahan

See: https://github.com/TomFrost/Jexl/issues/81

From my understanding it does not.

abierbaum avatar Apr 17 '22 13:04 abierbaum