VBC-903: eval-like-timers

error

Category: security
Analysis: Regex (line by line)
File types: .js, .ts, .tsx, .astro
Scope: source code only, ignoring anything inside strings and comments
Tags: security

What it reports

Passing strings to timers is eval-like and insecure at line {line}.

Flagged

setTimeout("poll()", 100);

Not flagged

setTimeout(poll, 100);

Pattern

(setTimeout|setInterval)\s*\(\s*['"].*?['"]