No-New-Function¶
Sourcery rule id: no-new-function
¶
Description¶
Never use the Function
constructor.
Match¶
var subtract = Function('a', 'b', 'return a - b');
Explanation¶
Creating a function using the Function
constructor evaluates a string similarly to eval()
which may open
up vulnerabilities.
From the Airbnb JavaScript Style Guide