Comparing version 0.0.50 to 0.0.51
{ | ||
"name": "webdetta", | ||
"version": "0.0.50", | ||
"version": "0.0.51", | ||
"author": "Fedot Kriutchenko <fodyadev@gmail.com>", | ||
@@ -5,0 +5,0 @@ "description": "", |
@@ -57,3 +57,2 @@ import FunctionParser from 'parse-function'; | ||
const $internals = Symbol('$internals'); | ||
export const SdkInstance = (rpcInstance, methods, entries) => { | ||
@@ -68,3 +67,3 @@ const instance = {}; | ||
if (rpcInstance) defineProperty(instance, [$internals], { | ||
if (rpcInstance) defineProperty(instance, ['#internals'], { | ||
value: rpcInstance, | ||
@@ -170,3 +169,3 @@ writable: false | ||
value: new Function(...signature, | ||
`return this.$internals.call(${JSON.stringify(handlerId)}, ...arguments);` | ||
`return this["#internals"].call(${JSON.stringify(handlerId)}, ...arguments);` | ||
) | ||
@@ -173,0 +172,0 @@ } |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
31158
902