VBC-039: use-eval

error

Category: core
Analysis: Regex (line by line)
File types: .js, .ts, .tsx, .py, .rb, .php, .astro
Scope: source code only, ignoring anything inside strings and comments
Tags: security

What it reports

Use of 'eval()' detected at line {line}. This is a massive security risk.

Flagged

eval(userInput);

result = eval(expr)

Not flagged

JSON.parse(userInput);

model.eval()

if is_eval(node): pass

Pattern

(?<![.\w])eval\s*\(