expr-eval

expr-eval copied to clipboard

ariesjia

Publish new version with recent changes to address security vulnerability

3

Hi all, I'm checking to confirm if the most current version of expr-eval is published to npm? - Last version appears to have been published 2-years ago, according to npm...

mannybecerra

Hi. I'm trying to use BigInt instead of regular numbers. I did what the answer in #198 but since a, b are still parsed as number so it's limited by...

arnnis

If I have a case where the expression is always evaluated against an object containing a specific list of variables, what would be the intended way to sanitize the passed...

kinsi55

Add seedable random number generator

1

Right now, the `random()` function is just the built-in `Math.random()` from the environment. It might be useful to use a deterministic, seedable generator. Some thought needs to go into how...

silentmatt

Access object properties using brackets

2

Use the latest version and write the following code： `Parser.evaluate('in1["key"]', { in1: { key: 'value' } });` I expect the above code to output "value", but got `undefined` Can you...

coco-super

Option for Parser to evaluate expression with missing variables as undefined

3

Currently if you try to evaluate an expression without providing a value for all the variables, the library throws an exception. In my situation I wanted to have smallest conditional...

SHND

Possible Prototype Pollution

6

I have found a possible prototype pollution vuln in this package. With speficific input attckers can define properties on prototype, which will lead to prototype pollution. Also I have made...

yoshino-s

Update type definitions

1

Minor changes to make the type definitions more accurate Add `operators.array` to `ParserOptions` Add types for `Parser.unaryOps`, `Parser.functions`, and `Parser.consts` Add boolean and array to `Value` type, since `evaluate` can...

jesse-r-s-hines

This adds docs to the README that you can disable arrays with the `array` operator and function definitions with the `fndef` operator.

jesse-r-s-hines