From 8c81c627f969686406b28f376177c28916f5cf46 Mon Sep 17 00:00:00 2001 From: LinFeiLong Date: Sat, 21 Dec 2019 05:52:09 +0100 Subject: [PATCH] Remove eval() Remove eval() --- README.md | 11 +++++++---- src/md5.js | 4 ++-- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 9453292..e601be1 100644 --- a/README.md +++ b/README.md @@ -1,16 +1,19 @@ +MyCrypto: This is a modified version of **js-md5**. +The **eval()** function was removed due to security concerns. + # js-md5 [![Build Status](https://travis-ci.org/emn178/js-md5.svg?branch=master)](https://travis-ci.org/emn178/js-md5) -[![Coverage Status](https://coveralls.io/repos/emn178/js-md5/badge.svg?branch=master)](https://coveralls.io/r/emn178/js-md5?branch=master) +[![Coverage Status](https://coveralls.io/repos/emn178/js-md5/badge.svg?branch=master)](https://coveralls.io/r/emn178/js-md5?branch=master) [![NPM](https://nodei.co/npm/js-md5.png?stars&downloads)](https://nodei.co/npm/js-md5/) A simple MD5 hash function for JavaScript supports UTF-8 encoding. ## Demo -[MD5 Online](http://emn178.github.io/online-tools/md5.html) +[MD5 Online](http://emn178.github.io/online-tools/md5.html) [MD5 File Checksum Online](http://emn178.github.io/online-tools/md5_checksum.html) ## Download -[Compress](https://raw.github.com/emn178/js-md5/master/build/md5.min.js) +[Compress](https://raw.github.com/emn178/js-md5/master/build/md5.min.js) [Uncompress](https://raw.github.com/emn178/js-md5/master/src/md5.js) ## Installation @@ -72,5 +75,5 @@ md5.base64(''); // 1B2M2Y8AsgTpgAmY7PhCfg== The project is released under the [MIT license](http://www.opensource.org/licenses/MIT). ## Contact -The project's website is located at https://github.com/emn178/js-md5 +The project's website is located at https://github.com/emn178/js-md5 Author: Chen, Yi-Cyuan (emn178@gmail.com) diff --git a/src/md5.js b/src/md5.js index ba6867d..dc75468 100644 --- a/src/md5.js +++ b/src/md5.js @@ -153,8 +153,8 @@ }; var nodeWrap = function (method) { - var crypto = eval("require('crypto')"); - var Buffer = eval("require('buffer').Buffer"); + var crypto = require('crypto'); + var Buffer = require('buffer').Buffer; var nodeMethod = function (message) { if (typeof message === 'string') { return crypto.createHash('md5').update(message, 'utf8').digest('hex');