View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
15286 | Bug reports | Security | public | 2019-09-16 14:46 | 2021-03-19 12:13 |
Reporter | ollehar | Assigned To | c_schmitz | ||
Priority | none | Severity | minor | ||
Status | closed | Resolution | no change required | ||
Product Version | 4.0.0-RC3 | ||||
Target Version | 4.0.0-RC4 | ||||
Summary | 15286: Don't use eval in JS | ||||
Description | We should probably discuss if eval is needed? We also use it in PHP to create "dynamic" tables... | ||||
Tags | No tags attached. | ||||
Bug heat | 258 | ||||
Complete LimeSurvey version number (& build) | latest | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | - | ||||
Database type & version | - | ||||
Server OS (if known) | - | ||||
Webserver software & version (if known) | - | ||||
PHP Version | - | ||||
Yii use it for dynamic generation of cell data Same with Yii2 : https://www.yiiframework.com/doc/api/2.0/yii-grid-column#$content-detail |
|
Can't find eval() in the Yii 2 link? |
|
Yes, you're right :). But Yii2 still have https://www.yiiframework.com/doc/api/2.0/yiirequirementchecker#evaluateExpression()-detail , unsure where it used. |
|
Bah. |
|
to be closed? |
|
Hello ollehar, we have asked for feedback on this issue. Because we did not get an answer we assume that the issue is resolved. Thank you and best regards, c_schmitz |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2019-09-16 14:46 | ollehar | New Issue | |
2019-09-16 15:09 | DenisChenu | Note Added: 53584 | |
2019-09-16 15:28 | ollehar | Note Added: 53586 | |
2019-09-16 15:49 | DenisChenu | Note Added: 53587 | |
2019-09-16 16:40 | ollehar | Note Added: 53589 | |
2020-12-23 17:52 | cdorin | Status | new => feedback |
2020-12-23 17:52 | cdorin | Note Added: 61130 | |
2021-03-19 12:13 | c_schmitz | Assigned To | => c_schmitz |
2021-03-19 12:13 | c_schmitz | Status | feedback => closed |
2021-03-19 12:13 | c_schmitz | Resolution | open => no change required |
2021-03-19 12:13 | c_schmitz | Note Added: 63474 |