Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

The Function constructor is not recognized as eval or implied-eval

See original GitHub issue

Tell us about your environment

  • ESLint Version: 4.8.0

What parser (default, Babel-ESLint, etc.) are you using?


Please show your full configuration:

eslint --rule 'no-implied-eval: 2' --rule 'no-eval: 2' file.js

What did you do? Please include the actual source code causing the issue.


What did you expect to happen?

Function(str) should be an error

  1:1  error  eval can be harmful                                            no-eval
  2:1  error  Implied eval. Consider passing a function instead of a string  no-implied-eval
  3:1  error  Implied eval. Consider passing a function instead of a string  no-implied-eval

✖ 3 problems (3 errors, 0 warnings)

What actually happened? Please include the actual, raw output from ESLint.

Function(str) is not an error

  1:1  error  eval can be harmful                                            no-eval
  2:1  error  Implied eval. Consider passing a function instead of a string  no-implied-eval

✖ 2 problems (2 errors, 0 warnings)

Issue Analytics

  • State:closed
  • Created 6 years ago
  • Comments:10 (9 by maintainers)

github_iconTop GitHub Comments

not-an-aardvarkcommented, Oct 12, 2017

(Marking this issue as “works as intended” because the behavior described in the original issue is working as designed.)

I think we might want to reconsider our standards for adding rules to eslint:recommended in general. There was some discussion about no-console in, and it seems like the consensus is to leave it in eslint:recommended because using console is undesirable in most applications. But it seems like we’re holding other rules to a much stricter standard. For example, we rejected adding no-template-curly-in-string to eslint:recommended for 4.0 because a deprecated jQuery plugin uses similar template syntax. It seems like it’s much more common to need to use console than to need to use that specific template syntax, so maybe we should reconsider the rules in eslint:recommended and try to apply a consistent standard to them.

platinumazurecommented, Oct 11, 2017

Thanks for the issue link. I personally think eslint:recommended should include rules that are solid practices in the vast, vast majority of situations. Code generation is not a common use case, in my view. I’ll reply on that issue later.

On Oct 11, 2017 10:04 AM, “薛定谔的猫” wrote:

@platinumazure seems we don’t have a consensus to add them. #8865

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread .

Read more comments on GitHub >

github_iconTop Results From Across the Web

The Function constructor is eval - JSLint Error Explanations
This error is raised to highlight a bad practice. By passing a string to the Function constructor you are requiring the engine to...
Read more >
no-implied-eval - Pluggable JavaScript Linter - ESLint
A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.
Read more >
Disallow Use of Function Constructor (no-new-func)
Prevents the creation of new functions using the Function() constructor. This is a non-standard, ... Disallow Implied Use of eval() (no-implied-eval).
Read more >
Why new Function not work as eval? - Stack Overflow
The important part is working with the arguments object and access your desired return value. old answer with eval: const myFunc = evalStr...
Read more >
List of available rules - ESLint - Pluggable JavaScript linter
disallow variable or function declarations in nested blocks ... disallow invalid regular expression strings in RegExp constructors ... no-implied-eval.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Post

No results found

github_iconTop Related Hashnode Post

No results found