attack works.
How to prevent dynamic code evaluation attacks?
We can avoid the usage of eval() as far as possible. The usage of eval() is actually normally discouraged. Web application developers should try to implement the functionality with some other function.
But, if you think you must use eval(), then make sure user-provided inputs are not directly used as input for the eval() function. Instead, we should process the input string, discard suspicious characters carefully, and then use it.










































0 Comments