Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @sun@shitposter.world
rees@rees@tsundere.love (2026-08-01 09:03:56)
@sun it's only in a technical sense unsafe eval, in practice it is safe. it becomes unsafe when you do things that reach outside of the sandbox into the dom or filesystem. an emulator does neither of those things, and isn't pulling in random code it's emulating it
---Attachments---
image: https://tsundere.love/media/f18dfa3f-f1c2-4272-bf91-b9c1fe59eff3/image.webp
---Reply---
Blurry Moon@sun@shitposter.world (2026-08-01 09:10:01)
It’s unsafe because you’re accepting arbitrary user input

---Replies---

rees@rees@tsundere.love (2026-08-01 09:11:34)
@sun do you actually believe that? you're typing on, I assume, a javascript enabled browser. if we want to go further you could say we shouldn't have bbcodes because you could potentially overload the syntax parser