Eval can be harmful (no-eval) How to fix in a proper way.

How,can i fix this without using eval:

how can we parse this

        var js = change.getElementsByTagName('script')
        for (var i = 0, j = js.length; i < j; i++) {
          eval(js[i].innerHTML)
        }

(page is loaded via AJAX, so no scripts will be executed without eval)

Code Snippet

  function getViaAjax (url) {
    var xmlPhttp

    if (window.XMLHttpRequest) {
      xmlPhttp = new window.XMLHttpRequest() // code for IE7+, Firefox, Chrome, Opera, Safari
    } else {
      xmlPhttp = new window.ActiveXObject('Microsoft.XMLHTTP') // code for IE6, IE5
    }

    xmlPhttp.open('POST', url, true)
    xmlPhttp.setRequestHeader('Content-type', 'application/x-www-form-urlencoded')
    xmlPhttp.onreadystatechange = function () {
      if (xmlPhttp.readyState === 4 && xmlPhttp.status === 200) {
        document.getElementById('changeMe').innerHTML = xmlPhttp.responseText

        // JavaScript Fix!
        var js = change.getElementsByTagName('script')
        for (var i = 0, j = js.length; i < j; i++) {
          eval(js[i].innerHTML) // ERROR
        }
      }
    }

---

Second note i’d need to copy some values from a library (new instance) to make it work like _.myFunction('pass'); and _('.wrapper').myFunction('pass'); but what ever i try it does only work in this way:

var tLib = new Library()
var copy
for (copy in tLib) {
  eval('_.' + copy + ' = tLib.' + copy + ';') // _.copy = tLib.copy (ERROR)
}

Please note that this is a crosspost: https://github.com/feross/standard/issues/308

[gyandeeps]

Just disable the rule for the whole file by putting this on top of your file:

/* eslint no-eval: 0 */

More info on how to configure rules: http://eslint.org/docs/user-guide/configuring#configuring-rules

[marcoms]

@rahulmr I think he means something like:

const e = eval;
e(script);

But this is still marked as an error with no-eval because the eval token is used