commit 95de0f7bb7bea11b67dab3057465341482ac236a
author airnan <hernantorrisi@gmail.com> Sat Dec 26 11:36:43 2020 -0500
committer airnan <hernantorrisi@gmail.com> Sat Dec 26 11:36:43 2020 -0500
tree 4d86b56d1c8860e06696482b6f4fce3016e93e20
parent f887c72559b60f21e7af5eaf63082639443d58fa

no-eval fix

.eslintrc.json

diff --git a/.eslintrc.json b/.eslintrc.json
index 0f2f47b..942adf1 100644
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -44,7 +44,6 @@
         "lines-around-directive": "off",
         "radix": "off",
         "camelcase": "off",
-        "no-eval": "off",
         "no-restricted-syntax": "off",
         "eqeqeq": "off"
     }

player/js/utils/expressions/ExpressionManager.js

diff --git a/player/js/utils/expressions/ExpressionManager.js b/player/js/utils/expressions/ExpressionManager.js
index 115bb3f..74a7c0c 100644
--- a/player/js/utils/expressions/ExpressionManager.js
+++ b/player/js/utils/expressions/ExpressionManager.js
@@ -404,17 +404,9 @@
       mask,
       valueAtTime,
       velocityAtTime;
-    var __expression_functions = [];
-    if (data.xf) {
-      var i,
-        len = data.xf.length;
-      for (i = 0; i < len; i += 1) {
-        __expression_functions[i] = eval('(function(){ return ' + data.xf[i] + '}())');
-      }
-    }
 
     var scoped_bm_rt;
-    var expression_function = eval('[function _expression_function(){' + val + ';scoped_bm_rt=$bm_rt}]')[0];
+    var expression_function = eval('[function _expression_function(){' + val + ';scoped_bm_rt=$bm_rt}]')[0]; // eslint-disable-line no-eval
     var numKeys = property.kf ? data.k.length : 0;
 
     var active = !this.data || this.data.hd !== true;