IgniteUI / ignite-ui

Ignite UI for jQuery by Infragistics

Home Page:https://bit.ly/2kuu1fT

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Remove unnecessary eval function from util file.

MayaKirova opened this issue · comments

commented

Description

The util file contains a call to eval function at:
https://github.com/IgniteUI/ignite-ui/blob/master/src/js/modules/infragistics.util.js#L6146

This is considered a security vulnerability and should be removed.
For other similar scenarios where the name of the function is passed (string) the function is retrieved from the window object, so the same can be done here.

  • ignite-ui version: 2020 Vol. 2
  • browser: Any

Steps to reproduce

  1. Check the file at: https://github.com/IgniteUI/ignite-ui/blob/master/src/js/modules/infragistics.util.js#L6146

Result

Eval call is used.

Expected result

No eval used.