diff options
| author | Yuchen Pei <id@ypei.org> | 2023-09-10 12:02:37 +1000 |
|---|---|---|
| committer | Yuchen Pei <id@ypei.org> | 2023-09-10 12:02:37 +1000 |
| commit | e942bb98325d0a4fdb79cdc75782f065c0289d70 (patch) | |
| tree | 38d41d98b9bbd9159896b51135126de03eb36546 | |
| parent | 46ecac9ab60b32ccc7b40a668938c84117de1b4d (diff) | |
It is similar to eval(). See,
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function/Function
As a prior art, another extension did the blank ban of Function():
https://addons.mozilla.org/en-US/firefox/addon/noeval-disable-eval/
So let's ban it as well.
Bug reported at
https://lists.gnu.org/archive/html/bug-librejs/2023-09/msg00000.html
| -rw-r--r-- | common/fname_data.json | 2 | ||||
| -rw-r--r-- | manifest.json | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/common/fname_data.json b/common/fname_data.json index 5606007..38652d6 100644 --- a/common/fname_data.json +++ b/common/fname_data.json @@ -714,7 +714,7 @@ "RadioNodeList": true, "KeyframeEffectReadOnly": true, "InstallTrigger": true, - "Function": false, + "Function": true, "Object": false, "eval": true, "Window": false, diff --git a/manifest.json b/manifest.json index 2a7a5f1..73bc918 100644 --- a/manifest.json +++ b/manifest.json @@ -2,7 +2,7 @@ "manifest_version": 2, "name": "GNU LibreJS", "short_name": "LibreJS", - "version": "7.21.0", + "version": "7.21.1", "author": "various", "description": "Only allows free and/or trivial Javascript to run.", "applications": { |