yongge/tvbox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #87 from tuanaiseo/contribai/fix/security/unsafe-use-of-eval-for-code-execution

Browse Source 
Security: Unsafe use of eval() for code execution
This commit is contained in:
qist
2026-05-10 08:18:27 +08:00
committed by GitHub
parent 8740c25721 ab7e2d7e5c
commit c7075cea95
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
js/海洋听书.js
+1 -1
View File
@@ -33,7 +33,7 @@ var rule = {
let v = pd(html, ".booksite&&script&&Html"); let v = pd(html, ".booksite&&script&&Html");
var document = {}; var document = {};
var VideoListJson; var VideoListJson;
VideoListJson = eval(v.split("VideoListJson=")[1].split(",urlinfo")[0]); VideoListJson = JSON.parse(v.split("VideoListJson=")[1].split(",urlinfo")[0]);
// log(typeof VideoListJson); // log(typeof VideoListJson);
let list1 = VideoListJson[0][1]; let list1 = VideoListJson[0][1];
LISTS = [list1]; LISTS = [list1];