New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Warn for use of eval #163

Open

Eneroth3 opened this issue Mar 28, 2023 · 1 comment

Labels

cop

Contributor

Eneroth3 commented Mar 28, 2023

Evaluating code from external sources may be a security concern. Add a cop catching the use of eval (and similar methods) and warn of the risks.

Eneroth3 added the cop label

Member

thomthom commented Apr 3, 2023

There is an RuboCop for eval: https://www.rubydoc.info/gems/rubocop/RuboCop/Cop/Security/Eval

But, maybe it's still worth to have one for the context of SketchUp? So if you run only SketchUp cops it's still being reported?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment