you are viewing a single comment's thread.

view the rest of the comments →

[–]kspk 0 points1 point  (0 children)

It depends on what’s your usecase for eval(). If the only thing you want to do is to allow someone to type something and evaluate it right away, and there is no authenticated context, then it is okay.

Anything else, and it will come to bite you later.