SPC028901: Use of eval can compromise site security |
Use of eval, and eval type functions causes severe security cross site scripting attack loopholes, on the site
CheckId | SPC028901 |
---|---|
TypeName | EvalEvil |
Severity | Error |
Type | JavaScriptFile |
Bad Practice
eval('alert("hi");');
Disclaimer: The views and opinions expressed in this documentation and in SPCAF do not necessarily reflect the opinions and recommendations of Microsoft or any member of Microsoft. SPCAF and RENCORE are registered trademarks of RENCORE AB. All other trademarks, service marks, collective marks, copyrights, registered names, and marks used or cited by this documentation are the property of their respective owners.