Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') #2476

Open
hoha666 opened this issue Jan 2, 2024 · 1 comment

Comments

@hoha666
Copy link

hoha666 commented Jan 2, 2024

flaw2

there is some kind of very high flaw about eval injection, found be Veracode on 6.14.3

is it possible to give me a workaround ?

@tbrannam
Copy link

This is key to dynamically importing code in Node. In the future I could see using Node's experimental VM loader or a custom loader. But that's not yet marked as stable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants