Repro for RFC#1070 - none of the default globals are accessible in eval-mode

Author: NullVoxPopuli

packages/@ember/-internals/glimmer/tests/integration/components/runtime-template-compiler-explicit-test.ts

@@ -1,4 +1,5 @@
 import { template } from '@ember/template-compiler/runtime';
+import { ALLOWED_GLOBALS } from '@ember/template-compiler';
 import { RenderingTestCase, defineSimpleModifier, moduleFor } from 'internal-test-helpers';
 import GlimmerishComponent from '../../utils/glimmerish-component';
 import { on } from '@ember/modifier/on';
@@ -336,3 +337,25 @@ moduleFor(
     }
   }
 );
+
+moduleFor(
+  'Strict Mode - Runtime Template Compiler (explicit) - allowed globals from RFC#1070',
+  class AllowedGlobalsTest extends RenderingTestCase {
+    static {
+      for (let globalName of ALLOWED_GLOBALS) {
+        if (!(globalName in globalThis)) continue;
+
+        // @ts-expect-error - this *is* generally unsafe
+        this.prototype[`@test Can use ${globalName}`] = async function () {
+          await this.renderComponentModule(() => {
+            return template(`{{if ${globalName} "exists"}}`, {
+              scope: () => ({}),
+            });
+          });
+
+          this.assertStableRerender();
+        };
+      }
+    }
+  }
+);

packages/@ember/-internals/glimmer/tests/integration/components/runtime-template-compiler-implicit-test.ts

@@ -1,4 +1,5 @@
 import { template } from '@ember/template-compiler/runtime';
+import { ALLOWED_GLOBALS } from '@ember/template-compiler';
 import { RenderingTestCase, defineSimpleModifier, moduleFor } from 'internal-test-helpers';
 import GlimmerishComponent from '../../utils/glimmerish-component';
 import { on } from '@ember/modifier/on';
@@ -466,6 +467,30 @@ moduleFor(
   }
 );
 
+moduleFor(
+  'Strict Mode - Runtime Template Compiler (implicit) - allowed globals from RFC#1070',
+  class AllowedGlobalsTest extends RenderingTestCase {
+    static {
+      for (let globalName of ALLOWED_GLOBALS) {
+        if (!(globalName in globalThis)) continue;
+
+        // @ts-expect-error - this *is* generally unsafe
+        AllowedGlobalsTest.prototype[`@test Can use ${globalName}`] = async function () {
+          await this.renderComponentModule(() => {
+            return template(`{{if ${globalName} "exists"}}`, {
+              eval() {
+                return eval(arguments[0]);
+              },
+            });
+          });
+
+          this.assertStableRerender();
+        };
+      }
+    }
+  }
+);
+
 /**
  * This function is used to hide a variable from the transpiler, so that it
  * doesn't get removed as "unused". It does not actually do anything with the

packages/@ember/template-compiler/index.ts

@@ -1 +1,3 @@
 export * from './lib/public-api';
+
+export { ALLOWED_GLOBALS } from './lib/plugins/allowed-globals';

packages/@ember/template-compiler/lib/plugins/allowed-globals.ts

@@ -0,0 +1,72 @@
+/**
+ * @private
+ *
+ * RFC: https://github.com/emberjs/rfcs/pull/1070
+ *
+ * Criteria for inclusion in this list:
+ *
+ *   Any of:
+ *     - begins with an uppercase letter
+ *     - guaranteed to never be added to glimmer as a keyword (e.g.: globalThis)
+ *
+ *   And:
+ *     - must not need new to invoke
+ *     - must not require lifetime management (e.g.: setTimeout)
+ *     - must not be a single-word lower-case API, because of potential collision with future new HTML elements
+ *     - if the API is a function, the return value should not be a promise
+ *     - must be one one of these lists:
+ *        - https://tc39.es/ecma262/#sec-global-object
+ *        - https://tc39.es/ecma262/#sec-function-properties-of-the-global-object
+ *        - https://html.spec.whatwg.org/multipage/nav-history-apis.html#window
+ *        - https://html.spec.whatwg.org/multipage/indices.html#all-interfaces
+ *        - https://html.spec.whatwg.org/multipage/webappapis.html
+ */
+export const ALLOWED_GLOBALS = new Set([
+  // ////////////////
+  // namespaces
+  // ////////////////
+  //   TC39
+  'globalThis',
+  'Atomics',
+  'JSON',
+  'Math',
+  'Reflect',
+  //   WHATWG
+  'localStorage',
+  'sessionStorage',
+  'URL',
+  // ////////////////
+  // functions / utilities
+  // ////////////////
+  //   TC39
+  'isNaN',
+  'isFinite',
+  'parseInt',
+  'parseFloat',
+  'decodeURI',
+  'decodeURIComponent',
+  'encodeURI',
+  'encodeURIComponent',
+  //   WHATWG
+  'postMessage',
+  'structuredClone',
+  // ////////////////
+  // new-less Constructors (still functions)
+  // ////////////////
+  //   TC39
+  'Array', // different behavior from (array)
+  'BigInt',
+  'Boolean',
+  'Date',
+  'Number',
+  'Object', // different behavior from (hash)
+  'String',
+  // ////////////////
+  // Values
+  // ////////////////
+  //   TC39
+  'Infinity',
+  'NaN',
+  //   WHATWG
+  'isSecureContext',
+]);