Function createSandboxedFunction

client/src/utils/sandboxedFunction.tsx:14–36

(
  args: Record<string, string>,
  script: string,
  isAsync = false,
)

}

const createSandboxedFunction = function (
  args: Record<string, string>,
  script: string,
  isAsync = false,
) {
  const params = Object.getOwnPropertyNames(args);

  if (containsGeneratorFunction(script)) {
    throw new Error('Generator functions are not supported');
  }

  const blacklist = [
    ...Object.getOwnPropertyNames(window).filter(
      (e) => e !== 'eval' && e !== 'arguments' && e !== 'btoa' && e !== 'atob',
    ),
  ];

  params.push(...blacklist);
  if (isAsync) {
    script = `return (async function() {${script}})()`;
  }
  return new Function(...params, '"use strict";' + script);
};

const sandboxedFunction = function (args: Record<string, string>, script: string) {
  const vals = Object.values(args);