[TYPO3-dev] Content-Security-Policy eval()

[Helmut Hummel]

Am 22.12.14 um 21:49 schrieb Jost Baron:

>> function evalFunc_pol(foreign, value) {
>>      return eval (((foreign=="-")?'-':'')+value);
>> }

In fact this is from jsfunc.evalfield.js which is part of the TYPO3 core.

Yes, this should be replaced with something smarter. We're on it ;)

Kind regards,
Helmut

-- 
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 CMS Active Contributor, TYPO3 Security Team Member

TYPO3 .... inspiring people to share!
Get involved: typo3.org