Execution of dynamically generated code
Reports a call of the eval()
, setTimeout()
, or setInterval()
function or an allocation of a Function
object. These functions are used to execute arbitrary strings of JavaScript text, which often dynamically generated. This can be very confusing, and may be a security risk.
Ignores the cases when a callback function is provided to these methods statically, without code generation.
Inspection Details | |
---|---|
Available in: | AppCode 2023.3, CLion 2023.3, GoLand 2023.3, IntelliJ IDEA 2023.3, JetBrains Rider 2023.1, PhpStorm 2023.3, PyCharm 2023.3, Qodana for .NET 2023.1, Qodana for JS 2023.3, Qodana for JVM 2023.3, Qodana for PHP 2023.3, Qodana for Ruby 2023.3, RubyMine 2023.3, WebStorm 2023.3 |
Plugin: | JavaScript and TypeScript, 233.SNAPSHOT |
Last modified: 13 July 2023