amark / gun

An open source cybersecurity protocol for syncing decentralized graph data.
https://gun.eco/docs
Other
18.03k stars 1.16k forks source link

LEX fix #1268

Open fitouch opened 2 years ago

fitouch commented 2 years ago

Finally LEX works in public and user graph! To play/test with LEX, use lex.html in examples/basic/

fitouch commented 2 years ago

@bmatusiak @amark @Orimay Please take a look at this!

amark commented 2 years ago

@fitouch super excited to have a helping hand!

I'm sad tho that there is a super dangerous security exploit, try this:

String.match('wow', {', alert(1), ': 'a'});

Basically eval should never be used.

Wanna join one of our coding calls?

fitouch commented 2 years ago

@amark ah yes, I should've thought of eval that's more dangerous. We could use hard code operator ("=", "<", ">", "*") instead.

I would like to join in coding calls, but I'm hearing impaired and chat is more easier for me.

fitouch commented 2 years ago

@amark new update now

amark commented 2 years ago

Oh, sorry about the coding calls :( I apologize.

I'll need to check back into this a bit later, had to deal with the cache fix update. Maybe someone else can also help review meanwhile?