Eval Function Debate
Discussions revolve around the use, risks, security issues, performance, and alternatives to the eval() function in dynamic programming languages like JavaScript, Python, and PHP.
Activity Over Time
Top Contributors
Keywords
Sample Comments
No, 'eval' is available in many dynamic languages and needs to be utilized with care
Because it's not about eval(), as the link you're commenting on explains in detail?
Makes me wonder if 'eval' still serves a legit purpose
Want to have eval? Stop everything.
do you have an eval? how did this actually help?
Page seems to be missing a "why?" section. Seriously, why? What does it do that eval() doesn't?
Interesting he never mentions "eval()". Anyone notice any performance issues here?
ahh, so this only applies to the 'eval' function, and not just any functions it seems.
Not in a general case, because eval/exec accepts an arbitrary string which could change at runtime.
If you're prepending code to user-input strings and later popping+parsing it to cause side effects, that's eval.