Andrew Chuang
Andrew Chuang
@dylburger @vellames-turing @feyzullah would love your inputs on possible security issues - commit 1452494c
> Hi @andrewjschuang we had a convo about using `eval` last time. We decided not to use `eval` because if a user input be a malicious function, `eval` would run...
> Hi @andrewjschuang Everything looks great. However I consider you should change versions in the rest of components as well since you are touching `data_stores.app.mjs`. Don't you think? Thanks, I...
Note: affected actions are: - add-update-record - get-record-or-create - has-key-or-create Basically, actions that use `parseValue()` function.
Hi @vunguyenhung, I've removed the code changes for this PR and only added changes to the descriptions for the triggers above. Please refer to the comments on the issue (#3523).
This enhancement would be used in #3887.
This is implemented in Gorgias [here](https://github.com/PipedreamHQ/pipedream/pull/2974/files#diff-e658b6f8707f232549331c465959d375bca3423885dc6acd2f7a7eb38496da44).
Can confirm I had the same issue
Resolved by #4592.