Giters

systemjs / systemjs

Dynamic ES module loader

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

hoha666 opened this issue · comments

commented

flaw2

there is some kind of very high flaw about eval injection, found be Veracode on 6.14.3

is it possible to give me a workaround ?

commented

This is key to dynamically importing code in Node. In the future I could see using Node's experimental VM loader or a custom loader. But that's not yet marked as stable.