Przeglądaj źródła

Disable eval(), its use is not needed and improves security.

Daniel Scalzi 7 lat temu
rodzic
commit
92d8a5e254

+ 2 - 2
app/assets/js/scripts/actionbinder.js

@@ -13,9 +13,9 @@ document.addEventListener('readystatechange', function(){
         }
     }
 
-    if (document.readyState === 'interactive'){
+    /*if (document.readyState === 'interactive'){
         
-    }
+    }*/
 }, false)
 
 /* Overlay Wrapper Functions */

+ 6 - 0
app/assets/js/scripts/uicore.js

@@ -8,6 +8,12 @@
 const $                         = require('jquery');
 const {remote, shell, webFrame} = require('electron')
 
+// Disable eval function.
+// eslint-disable-next-line
+window.eval = global.eval = function () {
+    throw new Error('Sorry, this app does not support window.eval().')
+}
+
 // Disable zoom, needed for darwin.
 webFrame.setZoomLevel(0)
 webFrame.setVisualZoomLevelLimits(1, 1)