laipeng/reflex
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use safer indirect eval

Browse Source
This commit is contained in:
Masen Furer 2024-12-03 11:25:16 -08:00
parent 027670c21c
commit 8ff81537f2
No known key found for this signature in database
GPG Key ID: B0008AD22B3B3A95
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
reflex/.templates/web/utils/state.js
View File

@ -214,7 +214,7 @@ export const applyEvent = async (event, socket) => {
a.href = event.payload.url;
// Special case when linking to uploaded files
if (a.href.includes("getBackendURL(env.UPLOAD)")) {
a.href = eval(
a.href = eval?.(
event.payload.url.replace(
"getBackendURL(env.UPLOAD)",
`"${getBackendURL(env.UPLOAD)}"`