ded/reqwest — Issue #72: Remove eval() calls
Author: lewisdiamond
Created: 2012-02-07 20:14:58+00:00
State: open

The eval calls should be removed from the library. Using eval can potentially expose cross-site scripting vulnerabilities. Remove eval from the built-in success function and have the user consciously call it himself inside his own success function if required.

An alternative is to have a response type called "eval" and definitely not have this defaulted. Eval is bad!