mcp-server-semgrep/semgrep-rules/html/security/audit/eval-detected.html

MCP Server for Semgrep Integration - static code analysis with AI

<!-- ruleid: eval-detected -->
<script>
    const rootDiv = document.getElementById('root');
    import { sanitize } from "dompurify"
    const hash = location.hash.slice(1)
    
    
    eval(hash1)
    
    const obj2 = { foo: 'baz', y: hash1 };
    
    const clonedObj = { ...obj2 };
    
    eval(clonedObj.y);
    
    // ok: eval-detected
    eval("safe");
    
    
    
    </script>