IgniteUI / ignite-ui

Ignite UI for jQuery by Infragistics
https://bit.ly/2kuu1fT
Other
477 stars 83 forks source link

Remove unnecessary eval function from util file. #2114

Closed MayaKirova closed 3 years ago

MayaKirova commented 3 years ago

Description

The util file contains a call to eval function at: https://github.com/IgniteUI/ignite-ui/blob/master/src/js/modules/infragistics.util.js#L6146

This is considered a security vulnerability and should be removed. For other similar scenarios where the name of the function is passed (string) the function is retrieved from the window object, so the same can be done here.

Steps to reproduce

  1. Check the file at: https://github.com/IgniteUI/ignite-ui/blob/master/src/js/modules/infragistics.util.js#L6146

Result

Eval call is used.

Expected result

No eval used.