Hacker News Reader

Comment by thenewwazoo | Hacker News Reader

Final follow-up: a more-exhaustive search also returned no evals in build.js files, nor any obviously-suspicious strings.

Have you checked for

    \u0065val

    e\u0076al

or any other combination of it?

This is impossible in general.

  eval === this[[1,18,-3,8].map(x=>String.fromCharCode(x+100)).join("")]

That's the point. That just checking for occurrences of strings like 'eval' just gives you false sense of security.