WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #50997, comment 9


Ignore:
Timestamp:
07/16/2022 08:54:21 AM (4 years ago)
Author:
jornfranke
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #50997, comment 9

    initial v1  
    11Sorry, I meant of course Function (capital F) object. Examples:
    22* https://github.com/WordPress/WordPress/blob/master/wp-includes/js/dist/data.js#L346
    3 * https://github.com/WordPress/WordPress/blob/master/wp-includes/js/dist/block-editor.js
     3* https://github.com/WordPress/WordPress/blob/master/wp-includes/js/dist/block-editor.js  (e.g. line 49564 which is unfortunately a good example for a vulnerability representing a cross-site-scripting attack)
    44
    55As you see it is the same as eval and thus bad.