Skip to main content
All CollectionsRule documentationLightning best practices
Unsafe JavaScript
Unsafe JavaScript

Prevent any use of the unsafe eval method in your Lightning controllers to reduce security risk

Lorenzo Frattini avatar
Written by Lorenzo Frattini
Updated over 6 years ago

Rationale

eval() and related reflection operations introduce significant security risk, are blocked by the LockerService, and in general in the AppExchange Security Review. Salesforce announced that future Content Security Policy settings will not allow unsafe-eval.

Scope

  • Lightning controllers

See also

Did this answer your question?