Vulnerability fix CVE-2022-46161

Co-authored-by: Igorescento Petrarca <[email protected]>
bpampuch · Dec 17, 2022 · af933ae · af933ae
1 parent 0f04a54
commit af933ae
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dev-playground/server.js b/dev-playground/server.js
@@ -42,7 +42,7 @@ function createPdfBinary(pdfDoc, callback) {
 }
 
 app.post('/pdf', function (req, res) {
-	eval(req.body.content);
+	const dd = new Function(req.body.content + '; return dd;')();
 
 	createPdfBinary(dd, function (binary) {
 		res.contentType('application/pdf');