All rules →
Rules / JavaScript / TypeScript
SHIELD-JS-006

Dangerous Function() constructor

highJavaScript / TypeScriptCWE-95CVSS 8.1

What it detects

new Function() dynamically compiles code and is equivalent to eval().

How to fix

Avoid the Function constructor. Refactor to static functions.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JS-006: Dangerous Function() constructor — Zennoxa Shield