5 ms·
Isn't "new Function" as evil as "eval" is evil? I guess when you call something a Compiler, it's allowed to do evilish stuff.
by greut 15y ago
Isn't "new Function" as evil as "eval" is evil? I guess when you call something a Compiler, it's allowed to do evilish stuff.
- deoxxa 15y agoIt's definitely evil, when it's used at runtime. In general (non-testing) usage, it would be written out to a file after compilation and there'd be no eval() action at runtime.
- itmag 15y agoWhy is eval evil? Because it's insecure? Inefficient?
- deoxxa 15y agoIt's mainly just slow - the whole set of code has to be parsed, processed, validated, run, etc every time it's used. It's not insecure in this usage (even if it were used on the client), as all the actual code is generated by uglify-js via an AST and it takes care of properly escaping everything.