mirror of
https://github.com/pulsar-edit/pulsar.git
synced 2024-11-10 10:17:11 +03:00
5e8213d45f
With Node.js baked in, there's no water-tight way to prevent users from evaluating code at runtime, at least with CSP alone. This is because node exposes a 'vm' module that allows scripts to be compiled. There's also `module._compile`, etc. I think a reasonable compromise is to protect users from eval'ing code by accident. This commit adds an atom.allowUnsafeEval method which re-enables eval in the dynamic scope of the given function. I then use this to compile the keystroke grammar which saves us the complexity of pre-compiling it during specs. What do people think? |
||
|---|---|---|
| .. | ||
| images | ||
| variables | ||
| atom.less | ||
| bootstrap.less | ||
| buttons.less | ||
| editor.less | ||
| icons.less | ||
| index.html | ||
| index.js | ||
| jasmine.less | ||
| links.less | ||
| linux.less | ||
| lists.less | ||
| markdown.less | ||
| messages.less | ||
| notification.less | ||
| octicons.less | ||
| octicons.woff | ||
| overlay.less | ||
| panels.less | ||
| panes.less | ||
| popover-list.less | ||
| sections.less | ||
| select-list.less | ||
| syntax.less | ||
| utilities.less | ||
| workspace-view.less | ||