Skip to content

Commit edd2759

Browse files
committed
Fix potential security vulnerability in transpiler and test files
1 parent 8bbe5a4 commit edd2759

File tree

3 files changed

+6
-6
lines changed

3 files changed

+6
-6
lines changed

src/transpiler.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ export function evaluateValue(expression: string): EvaluateReturn {
2929
) {
3030
const node = ast.program.body[0].declarations[0].init
3131
if (node != null && (node.type === 'StringLiteral' || node.type === 'ObjectExpression')) {
32-
// eslint-disable-next-line @typescript-eslint/no-implied-eval,@typescript-eslint/no-unsafe-call
32+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-call
3333
const val = new Function(`return ${expression.trim()} `)() as unknown
3434
ret.status = 'ok'
3535
ret.value = val

test/helper.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -176,7 +176,7 @@ function compileSlot(template: string) {
176176
prefixIdentifiers: true
177177
})
178178

179-
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type,@typescript-eslint/no-unsafe-call
179+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type, @typescript-eslint/no-unsafe-call
180180
const render = new Function('Vue', codegen.code)(runtimeDom) as Function
181181

182182
const ToRender = defineComponent({

test/ssr.test.ts

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ test('v-t: composition', async () => {
2020
directiveTransforms: { t: transformVT }
2121
})
2222
// prettier-ignore
23-
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type,@typescript-eslint/no-unsafe-call
23+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type, @typescript-eslint/no-unsafe-call
2424
const render = Function('require', 'Vue', code)(require, runtimeDom) as Function
2525
const App = defineComponent({
2626
setup() {
@@ -56,7 +56,7 @@ test('v-t: legacy', async () => {
5656
directiveTransforms: { t: transformVT }
5757
})
5858
// prettier-ignore
59-
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type,@typescript-eslint/no-unsafe-call
59+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type, @typescript-eslint/no-unsafe-call
6060
const render = Function('require', 'Vue', code)(require, runtimeDom) as Function
6161
const App = defineComponent({
6262
data: () => ({ dessert: 'banana' }),
@@ -93,7 +93,7 @@ test('script setup', async () => {
9393
directiveTransforms: { t: transformVT }
9494
})
9595
// prettier-ignore
96-
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type,@typescript-eslint/no-unsafe-call
96+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type, @typescript-eslint/no-unsafe-call
9797
const render = Function('require', 'Vue', code)(require, runtimeDom) as Function
9898
const App = defineComponent({
9999
setup() {
@@ -143,7 +143,7 @@ test('different translation signatures', async () => {
143143
},
144144
directiveTransforms: { t: direcive }
145145
})
146-
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type,@typescript-eslint/no-unsafe-call
146+
// eslint-disable-next-line @typescript-eslint/no-implied-eval, @typescript-eslint/no-unsafe-function-type, @typescript-eslint/no-unsafe-call
147147
return Function('require', 'Vue', code)(require, runtimeDom) as Function
148148
}
149149

0 commit comments

Comments
 (0)