Mark_Wonsil
September 4, 2024, 10:32am
20
Not so fast. Besides putting any logic in the UI that isn’t just UI-related being a poor practice, eval() will be curtailed according to the designer of Application Studio.
Sorry to be a buzzkill but I can answer any question about this right now - You will not be able to do this kind of js twiddling long term and you should not rely on it because we will for sure for security and application stability reasons be sandboxing any kind of code evaluation.
The reason you have it now is not because we need an appsec auditor to tell us about basic owasp recommendations like CSP (though we do of course have that) it’s that we’ll be adding an execution sandbox and factor…