You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The use of eval here is unsafe (XSS, etc.). The evaluation will fail if the formula is not defined properly, causing the page to break. I recommend that you apply error handling to this part of the code, ensure that all the inputs contain the necessary variables that need to be replaced, or even better, not use raw eval at all (although I understand that finding a suitable replacement without introducing too much complexity to the existing code is not ideal).
The text was updated successfully, but these errors were encountered:
Thank you for your response, I understand :)
Decided to report this, as couple of users occasionally run into this issue at FreeFlarum and don't know what to do because their forum breaks for no apparent reason (so some error handling would definitely be nice so that the page may continue loading)
flarum-custom-levels/js/src/forum/components/LevelBar.js
Line 33 in 3e700da
The use of
eval
here is unsafe (XSS, etc.). The evaluation will fail if the formula is not defined properly, causing the page to break. I recommend that you apply error handling to this part of the code, ensure that all the inputs contain the necessary variables that need to be replaced, or even better, not use raweval
at all (although I understand that finding a suitable replacement without introducing too much complexity to the existing code is not ideal).The text was updated successfully, but these errors were encountered: