News for hackers. Stuff that matters.

A comment on JavaScript Garden. Parent comment

Re:JavaScript Garden by babablacksheep on Wednesday January 14, 2015 @08:18AM (#8886005)
new Function() parses the JavaScript code stored in a string into a function object, which can then be called. It cannot access local variables because the code runs in a separate scope.
[ Parent | on HN ]
Re:JavaScript Garden by LunaSea on Wednesday January 14, 2015 @10:17AM (#8886721)
Function constructor as well as setInterval() and setTimeout() with stringyfied functions are almost as insecure as eval().

Until now I don't think that I have ever encountered a case where any of these were the absolute only solution.

[ Parent | on HN ]