[Webkit-unassigned] [Bug 60800] InjectedScriptSource.js - "Don't be eval()."

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=60800





--- Comment #10 from Yury Semikhatsky <yurys at chromium.org>  2011-05-16 02:41:16 PST ---
(In reply to comment #9)
> > Providing a binding to InjectedScriptHost to call ScriptController::evaluate wouldn't help here if ScriptController::disableEval has already been called for the context. We need a way to enable evaluations only for expressions provided by inspector.
> 
> Why is that?  disableEval shouldn't affect ScriptController::evaluate.

Oh, I see it uses Script::Compile/Run so it should work fine. But what about asynchronous evaluations when user types something like this in inspector console:
setTimeout("eval('var x = 10;')",0)

It is probably OK to fail in this case with a reasonable error message.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.