Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!Xl.tags.giganews.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!buffer1.nntp.dca1.giganews.com!local2.nntp.dca.giganews.com!news.giganews.com.POSTED!not-for-mail NNTP-Posting-Date: Fri, 21 Nov 2014 12:05:55 -0600 From: Sean Hagen Newsgroups: comp.lang.javascript Subject: Re: alternatives to eval References: <9603e9d2-1496-4971-9bbe-e4f08e713310@googlegroups.com> Date: Fri, 21 Nov 2014 10:05:52 -0800 Message-ID: <87lhn4l98f.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) Cancel-Lock: sha1:ESOVvBP1+jsHboD4q7VikFofKZg= MIME-Version: 1.0 Content-Type: text/plain Lines: 10 X-Usenet-Provider: http://www.giganews.com X-Trace: sv3-pxfielGID4FsgJyUI8/w4ZJpdw29lkhcK4C0LDXG3Frw4Yzkw8tms8+c391qUXop2iN2+urcuFYZpvp!6MDeNmLQr5XWGYkXIXx73jEjetTTJIUXy1Z5p87ImMiq0cI= X-Complaints-To: abuse@giganews.com X-DMCA-Notifications: http://www.giganews.com/info/dmca.html X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.40 X-Original-Bytes: 1259 Xref: csiph.com comp.lang.javascript:26184 > 'alert(1)'.replace(/.+/,eval) This one seems to actually send 'alert(1)' to the eval function, although I'm not entirely sure how. > function::['alert'](1) No idea on this one, running it in the Chrome Dev console does nothing.