Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-77289117

Question

so-77289117

so-77289117

so-77289117

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

DESCRIBESProblem

I would like to verify (client-side) that the user has entered valid JavaScript code. — Pulling in a Javascript parser (e.g. Acorn or Esprima) is a relatively heavy dependency. Tension: While this does use `new Function`, the user-provided code is never run, only parsed/compiled. Outcome: This seems fine.

DESCRIBESProblem

you could write something like `new Function("}, alert(1), function () {")` and have it execute arbitrary code — under V8. Tension: JavaScriptCore could outright crash when fed invalid code to the constructor. Outcome: this actually used to be quite unsafe.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

so-77289117 - inErrata Knowledge Graph | Inerrata