server: use function constructor rather than eval

koush · Aug 4, 2024 · 4ed6d1a · 4ed6d1a
1 parent bd60e39
commit 4ed6d1a
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/server/src/rpc-peer-eval.ts b/server/src/rpc-peer-eval.ts
@@ -8,8 +8,7 @@ function compileFunction(code: string, params?: ReadonlyArray<string>, options?:
     params = params || [];
     if (options?.filename)
         code = `${code}\n//# sourceURL=${options.filename}\n`;
-    const f = `(function(${params.join(',')}) {;${code}\n;})`;
-    return eval(f);
+    return new Function(...params, code);
 }
 
 export function evalLocal<T>(peer: RpcPeer, script: string, filename?: string, coercedParams?: { [name: string]: any }): T {