eval() should not be used JS-0060eval can be harmful
19TLib.setHomePage=function(url){if(!url){return false;}if (document.all){document.body.style.behavior='url(#default#homepage)'; document.body.setHomePage(url);return false;}else if(window.sidebar){if(window.netscape){try{netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");}catch(e){alert("this action was aviod by your browser,if you want to enable,please enter about:config in your address line,and change the value of signed.applets.codebase_principal_support to true");}}var prefs=Components.classes['@mozilla.org/preferences-service;1'].getService(Components.interfaces.nsIPrefBranch);prefs.setCharPref('browser.startup.homepage',url);return false;}}
20TLib.goToUrl=function(url,target){if(url){if(target==''){window.location=url;}else{window.open(url);}}}
21TLib.goLink=function(id,target){if(TLib.getObj(id)){var url=TLib.getObj(id).options[TLib.getObj(id).selectedIndex].value;if(url!=''){if(target==''){window.location=url;}else{window.open(url);}}}}
22TLib.showPager=function(pageCount,currentPage,url){var pages=new Array();var startPage=0;var endPage=0;if(eval(pageCount)==1){TLib.getObj("showpager").display="none";return;}startPage=currentPage-2;if(startPage<0){startPage=0;}if(startPage+4<pageCount){endPage=startPage+4;}else{endPage=pageCount-1;}if(endPage-4<0){startPage=0;}else{startPage=endPage-4;}pages[pages.length]="<a class='Page' "+(pageCount>0?"href='"+url.replace("{page}",0)+"'":"")+">|<</a>";pages[pages.length]="<a class='Page' "+(currentPage-1>=0?"href='"+url.replace("{page}",currentPage-1)+"'":"")+"><</a>";for(var i=startPage;i<=endPage;i++){pages[pages.length]="<a class='"+(i==currentPage?"Current":"Page")+"' href='"+url.replace("{page}",i)+"'>"+(i+1)+"</a>";}pages[pages.length]="<a class='Page' "+(currentPage+1<pageCount?"href='"+url.replace("{page}",currentPage+1)+"'":"")+">></a>";pages[pages.length]="<a class='Page' "+(pageCount>0?"href='"+url.replace("{page}",pageCount-1)+"'":"")+">>|</a>";document.write(pages.join(" "));}23TLib.writeSupport=function(address,type,imgUrl){if(address==''){return;}if(type==''){document.write('<a href="ymsgr:sendIM?'+address+'"><img border="0" src="http://opi.yahoo.com/online?u='+address+'&m=g&t='+imgUrl+'&l=us" alt="" /></a>');}else if(type=='1'&&imgUrl!=''){document.write('<script type="text/javascript" src="http://download.skype.com/share/skypebuttons/js/skypeCheck.js"></script><a href="skype:'+address+'?call" ><img alt="" src="'+imgUrl+'" style="border:0px;" /></a>');}}
24TLib.writeAdv=function(url,link,width,height,className,title,target){if(!url){return;}width=width?"width='"+width+"'":"";height=height?"height='"+height+"'":"";link=link?"href='"+link+"'":"";title=title?"title='"+title+"'":"";target=target?"target='"+target+"'":"";className=className?"class='"+className+"'":"";if(url.match(/.swf$/ig)){document.write("<embed src='"+url+"' quality='best' wmode='transparent' "+width+" "+height+" align='middle' allowScriptAccess='sameDomain' type='application/x-shockwave-flash' pluginspage='http://www.macromedia.com/go/getflashplayer' />");}else{document.write("<a "+className+" "+link +" "+title+" "+target+"><img src='"+url+"' "+width+" "+height+" style='border:none'/></a>");}}
25TLib.getParamFromUrl=function(name){var q=document.location.search;var i=q.indexOf(name+'=');if(i==-1){return false;}var r=q.substr(i+name.length+1,q.length-i-name.length-1);i=r.indexOf('&');if(i!=-1){r=r.substr(0,i);}return r.replace(/\+/g,' ');}eval can be harmful
1//---------------Dao Xuan Thai----------------//
2var Namespace={Register:function(_Name){var chk=false;var cob="";var spc=_Name.split(".");for(var i=0;i<spc.length;i++){if(cob!=""){cob+=".";}cob+=spc[i];chk = this.Exists(cob);if(!chk){this.Create(cob);}}if(chk){throw "Namespace: "+_Name+" is already defined.";}},Create:function(_Src){eval("window."+_Src+" = new Object();");},Exists:function(_Src){eval("var NE = false; try{if("+_Src+"){NE = true;}else{NE = false;}}catch(err){NE=false;}");return NE;}} 3Namespace.Register("TLib");
4var LoadingImg='Images/Loading.gif';
5var DateNames=new Array("Chủ nhật","Thứ hai","Thứ ba","Thứ tư","Thứ năm","Thứ sáu","Thứ bảy");eval can be harmful
1//---------------Dao Xuan Thai----------------//
2var Namespace={Register:function(_Name){var chk=false;var cob="";var spc=_Name.split(".");for(var i=0;i<spc.length;i++){if(cob!=""){cob+=".";}cob+=spc[i];chk = this.Exists(cob);if(!chk){this.Create(cob);}}if(chk){throw "Namespace: "+_Name+" is already defined.";}},Create:function(_Src){eval("window."+_Src+" = new Object();");},Exists:function(_Src){eval("var NE = false; try{if("+_Src+"){NE = true;}else{NE = false;}}catch(err){NE=false;}");return NE;}} 3Namespace.Register("TLib");
4var LoadingImg='Images/Loading.gif';
5var DateNames=new Array("Chủ nhật","Thứ hai","Thứ ba","Thứ tư","Thứ năm","Thứ sáu","Thứ bảy");eval can be harmful
40
41 if (FTB_Browser.isIE) {
42 this.previewPane = eval(this.id + "_previewPane");
43 this.designEditor = eval(this.id + "_designEditor"); 44 this.designEditor.ftb = this;
45 this.designEditor.document.ftb = this;
46 document.getElementById(this.id + "_designEditor").document.ftb = this;eval can be harmful
39 this.htmlEditor = document.getElementById(this.id);
40
41 if (FTB_Browser.isIE) {
42 this.previewPane = eval(this.id + "_previewPane"); 43 this.designEditor = eval(this.id + "_designEditor");
44 this.designEditor.ftb = this;
45 this.designEditor.document.ftb = this;
Description
JavaScript's eval() function is potentially dangerous and is often misused.
Using eval() on untrusted code can open a program up to several different injection attacks.
The use of eval() in most contexts can be substituted for a better, alternative approach to the problem.
Bad Practice
const obj = { x: "foo" }
const key = "x"
const value = eval("obj." + key);
(0, eval)("var a = 0");
const foo = eval;
foo("var a = 0");
// This `this` is the global object.
this.eval("var a = 0");
Recommended
const obj = { x: "foo" },
key = "x",
value = obj[key];
class A {
foo() {
// This is a user-defined method.
this.eval("var a = 0");
}
eval() { /* ... * / }
}