Quantcast
Channel: What are the security issues with "eval()" in JavaScript? - Information Security Stack Exchange
Viewing all articles
Browse latest Browse all 6

What are the security issues with "eval()" in JavaScript?

$
0
0

Every time that someone mentions eval(), everyone says that there are "security issues" with it, but nobody ever goes into detail about what they are. Most modern browsers seem to be able to debug eval() just as well as normal code, and people's claims of a performance decrease are dubious/browser dependent.

So, what are the issues, if any, associated with eval()? I haven't been able to come up with anything that could be exploited with eval() in JavaScript. (I do see issues with eval()'ing code on the server, but client-side eval() seems to be safe.)


Viewing all articles
Browse latest Browse all 6

Latest Images

Trending Articles





Latest Images