formio / protected-eval

Form.io Protected Eval Plugin

This plugin makes formiojs library to use sandboxed eval with custom js-interpreter instead of default eval function.

Usage

import ProtectedEval from '@formio/protected-eval';
import { Formio } from 'formiojs';

Formio.use(ProtectedEval);

Differences with classic eval

Plugin doesn't allow usage of following variables in custom scripts:

• instance
• self

There is also a performance regression when this library is used. If you have more than 100 calculated values within your form, you will see a noticable performance decrease in the runtime performance of the form.

protected-eval's Issues

Upgrade to [email protected]

js-interpreter has recently been updated with some performance enhancements, upgarding to 3.0.1 would probably increase the speed of form.io significantly, therefore it's worth upgrading.

Opening a PR is simple enough, but I wasn't sure how to test the library, if you want me to, I can open a PR with the required changes.