mirror of
https://github.com/qist/tvbox.git
synced 2026-06-21 00:53:15 +00:00
Merge pull request #87 from tuanaiseo/contribai/fix/security/unsafe-use-of-eval-for-code-execution
Security: Unsafe use of eval() for code execution
This commit is contained in:
@@ -33,7 +33,7 @@ var rule = {
|
||||
let v = pd(html, ".booksite&&script&&Html");
|
||||
var document = {};
|
||||
var VideoListJson;
|
||||
VideoListJson = eval(v.split("VideoListJson=")[1].split(",urlinfo")[0]);
|
||||
VideoListJson = JSON.parse(v.split("VideoListJson=")[1].split(",urlinfo")[0]);
|
||||
// log(typeof VideoListJson);
|
||||
let list1 = VideoListJson[0][1];
|
||||
LISTS = [list1];
|
||||
|
||||
Reference in New Issue
Block a user