When and how is javascript eval() vulnerable to injection?
285
When is JavaScript's eval() not evil?
110079
Python eval: is it still dangerous if I disable builtins and attribute access?
28924
Why does JavaScript's eval need parentheses to eval JSON data?
26155
Why does canvas.toDataURL() throw a security exception?
140402
Do inner functions in JavaScript get hoisted? How do the scoping rules apply to them?
16088
How does the (function() {})() construct work and why do people use it?
65823
What is this JavaScript pattern called and why is it used?
29148
Is there an eval() function in Java?
13586
Why do regex constructors need to be double escaped?
11651
What does curly brackets in the `var { ... } = ...` statements do?
70142
How does jQuery.expr[':'] work and where is it documented for jQuery1.8.x and later?
20926
PHP protection of GET parameters
1183
Escaping HTML strings with jQuery
140826
Force JavaScript exception/error when reading an undefined object property?
141121
How are arguments evaluated in a function call?
85830
How to debug obfuscated JavaScript?
74188
How can I avoid SQL injection attacks in my ASP.NET application?