Tech
eval() in a straitjacket: running user JavaScript under a strict CSP
I run String Utility Belt , a browser tool for chaining text transformations. Decode the Base64, pretty-print the JSON, pull out one field, save and reuse this pipeline everywhere. It has a couple of hundred built-in tools, but you will still, one day, need the one I didn't write.
So there's an escape hatch: a custom JavaScript step. You write a function body, it gets input , and whatever you return goes to the next step.
Lovely feature. Terrifying feature.
The trouble is who uses a s...
Read the full discussion on Dev.to
This article was aggregated from Dev.to. Click to join the conversation.
View on Dev.to