eval() logic in jQuery
eval() logic in jQuery
Can someone explain the logic, maybe even the history of how and when
eval() is used in jQuery?
I am trying to grasp the security nature of using jQuery. I've been
too loose with using jQuery in our product and now I need to clean it
up before we release our new update that includes some enhancd "Web
2.0" areas with jQuery features.
For example, in one usage, I had to use evalScript() to process any
embedded scripts. On one usage, I didn't want it because the data was
externally defined and yet to be filtered. So I didn't get if it
displayed it raw because no scripts would be run. I believe that
changed in 1.1.4+
But going back, I see that it does eval the html. So I'm scratching
my head here.
What is suppose to be the "eval" logic with?
.html(htmlString)
.load(url)
.get(url)
.post(url)
Thanks for your guidance.
--
HLS