Browse Source

Revert "Disable eval from webviews."

This reverts commit f46631a6fb.

This fixes #76 and #79.

Apparently some sites, in this case FB Messenger and Outlook 365,
blindly use `eval` and aren't responsive to fixes. If this causes
security problems down the road, please don't blame me. :)
pull/3202/head
TheGoddessInari 6 years ago
parent
commit
6415d37ba5
No known key found for this signature in database
GPG Key ID: 1209B1B7632D69A
  1. 8
      resources/js/rambox-service-api.js

8
resources/js/rambox-service-api.js

@ -65,11 +65,3 @@ Notification.permission = NativeNotification.permission;
Notification.requestPermission = NativeNotification.requestPermission.bind(Notification);
window.close = function() { location.href = location.origin };
/**
* Disable eval for security reasons.
*/
// eslint-disable-next-line no-eval
window.eval = global.eval = function () {
throw new Error(`Sorry, this app does not support window.eval().`);
};

Loading…
Cancel
Save