share-extras / media-viewers

Enhanced document previews for a range of different document and media types, plus a dashlet allowing any content item to be displayed on a site dashboard.
Apache License 2.0
29 stars 23 forks source link

Use of eval() inside web script controller extensions is not safe #33

Closed wabson closed 10 years ago

wabson commented 10 years ago

The jsonUtils root object provides a toObject() method which can be used to deserialise JSON strings into objects, which provides a much safer alternative.

See http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Freferences%2Fapi-ws-obj-jsonUtils.html