From 4ed6d1a9fdce726db1dffa0fdf5a35b84a8944ce Mon Sep 17 00:00:00 2001
From: Koushik Dutta <koushd@gmail.com>
Date: Sat, 3 Aug 2024 23:42:53 -0700
Subject: [PATCH] server: use function constructor rather than eval

---
 server/src/rpc-peer-eval.ts | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/server/src/rpc-peer-eval.ts b/server/src/rpc-peer-eval.ts
index 213463f56..e73d457ce 100644
--- a/server/src/rpc-peer-eval.ts
+++ b/server/src/rpc-peer-eval.ts
@@ -8,8 +8,7 @@ function compileFunction(code: string, params?: ReadonlyArray<string>, options?:
     params = params || [];
     if (options?.filename)
         code = `${code}\n//# sourceURL=${options.filename}\n`;
-    const f = `(function(${params.join(',')}) {;${code}\n;})`;
-    return eval(f);
+    return new Function(...params, code);
 }
 
 export function evalLocal<T>(peer: RpcPeer, script: string, filename?: string, coercedParams?: { [name: string]: any }): T {