diff --git a/js/Sandbox.js b/js/Sandbox.js index 3acab652a..3d8d8097a 100644 --- a/js/Sandbox.js +++ b/js/Sandbox.js @@ -37,7 +37,7 @@ var sandbox = function(code,globals) { out.push(";})"); // Parse the code var tree = uglify.parser.parse(out.join("")); - // XXX: Sanitise the code by checking for references to globals + // XXX: Sanitise the code by checking for references to globals, stripping out eval() // Recompile the code var compiledCode = uglify.uglify.gen_code(tree); // Execute it