Implement a function allowing to run user's own javascript code

Question

I need a function in my currently building web project. Users are able to input their own Javascript code into <textarea> and run it after clicking a <button>. I have no idea about how to implement it. Could anyone help me with that? Thanks!

secretformula · Accepted Answer · 2014-05-15 17:01:01Z

1

The most straight forward way that I can think to do this would be to use the eval() function. You would read the input code from the <textarea> and then pass it to eval(codeString) which would execute it.

With the above said there are security risks with using eval and there are probably better (more complex) ways to do what you want but for something simple I think eval() could work for you.

EDIT: So long as you're only running code this particular user gave you, and aren't letting users run other people's code, there is no security risk - @Niet the Dark Absol

edited May 15, 2014 at 17:01

answered May 15, 2014 at 16:53

secretformula

6,4324 gold badges35 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Niet the Dark Absol Over a year ago

So long as you're only running code this particular user gave you, and aren't letting users run other people's code, there is no security risk because it's basically a primitive Developer Tools console.

Niet the Dark Absol Over a year ago

I say that, but then I remember this...

secretformula Over a year ago

I think in the general case you are correct, you arent really giving the (malicious)user anything that they didnt have before with this kinda thing on the type of project I think the OP will be creating

Collectives™ on Stack Overflow

Implement a function allowing to run user's own javascript code

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related