replicator

replicator copied to clipboard

Avoid usage of eval() to comply with strict CSP

2

At the moment Replicator is breaking javascript bundles in environments where a strict Content Security Policy prevents use of `eval()`. The following changes fix that issue by using another method...

olivierkaisin

- [ ] Refactor the TypedArray deserializer to avoid RCE [WIP] (#16) - [ ] Refactor the Error deserializer to avoid RCE and eliminate `eval()` - [ ] Execute deserializers...

AndreyBelym

We should use modern language constructions, like classes, const/let, etc.

AndreyBelym

Use modern build tools

AndreyBelym

Move codebase to TypeScript

AndreyBelym

Is it possible to limit the serialization to a certain depth of property nesting? Thanks!

franciscolourenco

`replicator` can't properly serialize `window.performance.timing` because all its properties are in the prototype. ```js 'connectEnd' in window.performance.timing // true window.performance.timing.hasOwnProperty('connectEnd') // false ```

AndreyBelym