commit caeae147c14e81b214dbf2aa7d5bbe591173f1fc
author airnan <hernantorrisi@gmail.com> Sun May 16 19:43:56 2021 -0400
committer airnan <hernantorrisi@gmail.com> Sun May 16 19:43:56 2021 -0400
tree f63874bea378a4c257679b311431a0169e9128c7
parent 73b45bd31aadf8bebe37c94d763dfc96f18c0c7c
parent c06d16bcb68aaebc2b505e1470e6bfcaf11d3ff8

Merge branch 'master' of github.com:airbnb/lottie-web

player/js/utils/expressions/ExpressionManager.js

diff --git a/player/js/utils/expressions/ExpressionManager.js b/player/js/utils/expressions/ExpressionManager.js
index a5743eb..b92d099 100644
--- a/player/js/utils/expressions/ExpressionManager.js
+++ b/player/js/utils/expressions/ExpressionManager.js
@@ -410,6 +410,7 @@
     var velocityAtTime;
 
     var scoped_bm_rt;
+    val = val.replace(/(\\?"|')((http)(s)?(:\/))?\/.*?(\\?"|')/g, "\"\""); // deter potential network calls
     var expression_function = eval('[function _expression_function(){' + val + ';scoped_bm_rt=$bm_rt}]')[0]; // eslint-disable-line no-eval
     var numKeys = property.kf ? data.k.length : 0;