laipeng/reflex
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use safer indirect eval

Browse Source
This commit is contained in:
Masen Furer 2024-12-03 11:25:16 -08:00
parent 027670c21c
commit 8ff81537f2
No known key found for this signature in database
GPG Key ID: B0008AD22B3B3A95
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
reflex/.templates/web/utils/state.js
View File

@ -214,7 +214,7 @@ export const applyEvent = async (event, socket) => {
a.href = event.payload.url; a.href = event.payload.url;
// Special case when linking to uploaded files // Special case when linking to uploaded files
if (a.href.includes("getBackendURL(env.UPLOAD)")) { if (a.href.includes("getBackendURL(env.UPLOAD)")) {
a.href = eval( a.href = eval?.(
event.payload.url.replace( event.payload.url.replace(
"getBackendURL(env.UPLOAD)", "getBackendURL(env.UPLOAD)",
`"${getBackendURL(env.UPLOAD)}"` `"${getBackendURL(env.UPLOAD)}"`