Merge pull request #87 from tuanaiseo/contribai/fix/security/unsafe-use-of-eval-for-code-execution

Security: Unsafe use of eval() for code execution
This commit is contained in:
qist
2026-05-10 08:18:27 +08:00
committed by GitHub

View File

@@ -33,7 +33,7 @@ var rule = {
let v = pd(html, ".booksite&&script&&Html");
var document = {};
var VideoListJson;
VideoListJson = eval(v.split("VideoListJson=")[1].split(",urlinfo")[0]);
VideoListJson = JSON.parse(v.split("VideoListJson=")[1].split(",urlinfo")[0]);
// log(typeof VideoListJson);
let list1 = VideoListJson[0][1];
LISTS = [list1];