mgilangjanuar/agentify
GitHub で見るRun the JS function in the isolated VM — or, build a safe eval function
Open
#1 opened on 2024年7月11日
help wanted
Repository metrics
- Stars
- (52 stars)
- PR merge metrics
- (PR metrics pending)
説明
Problem:
There's a vuln in the agentify-script which uses the eval function and can run anything from user code.
Expectation:
Need a dependency like isolated-vm but can include global native JS functions/objects such as: fetch, btoa, URL.searchParams, Buffer, JSON, etc.