jsParse: Replace eval()

The evil() function is considered eval, replace it like we
already did in looking glass.

Part-of: <https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2842>

diff --git a/js/misc/jsParse.js b/js/misc/jsParse.js
index 97a6ce470f0032bf6bdfed28b2b00e13bc649be3..18ce703982a0cf5a91ba99e89efa1f334f5044d6 100644 (file)
--- a/js/misc/jsParse.js
+++ b/js/misc/jsParse.js
@@ -197,7 +197,9 @@ function getPropertyNamesFromExpression(expr, commandHeader = '') {
     let obj = {};
     if (!isUnsafeExpression(expr)) {
         try {
-            obj = eval(commandHeader + expr);
+            const lines = expr.split(';');
+            lines.push(`return ${lines.pop()}`);
+            obj = Function(commandHeader + lines.join(';'))();
         } catch (e) {
             return [];
         }