Question about eval and CSP about yantra HOT 5 CLOSED

We actually forgot to add support for string parameter in setTimeout and setInterval methods, so they will not work anyway.
We are evaluating how to add CSP support, meanwhile you can override eval and function as shown below.

var context = new JSContext();
context[KeyStrings.eval] = new JSFunction((in Arguments a) => throw context.NewTypeError("Not supported"));
context["Function"] = new JSFunction((in Arguments a) => throw context.NewTypeError("Not supported"));

Let me know if you face some issue.

from yantra.

Hello,
I've tried the approach you outlined. eval works fine, but I'm getting an exception when defining Function:

YantraJS.Core.JSException
  HResult=0x80131500
  Message=Cannot modify property Function of [object Object]
  Source=YantraJS.Core
  StackTrace:
at Item in /home/runner/work/yantra/yantra/YantraJS.Core/Core/Object/JSObject.cs:line 459

Using version 1.1.220.
Not sure if there is any othe rworkaround.
Thanks.

from yantra.

@tonto7973

I have added EvalEvent inside JSContext which lets you throw an exception as shown below. You can ignore earlier approach.

var context = new JSContext();
context.EvalEvent += (s, e) => throw context.NewTypeError("Eval not supported");

This should work. This event will be fired in eval and in Function constructor.

from yantra.

Hi @ackava, this helped. Many thanks.

from yantra.

@tonto7973

We are happy that we were able to help you, please do not forget to put star and please promote our Engine on social media and on your blog when you get a chance.

from yantra.