# nv-vali-is-safe-func-code

> nv-vali-is-safe-func-code =============== - nv-vali-is-safe-func-code - to check if a code-string of function/arrow-function from remote is safe for eval - for nodejs server using

Latest version **1.0.5** (published 2022-08-18) · ISC license · 0 weekly downloads

## Install

```sh
npm install nv-vali-is-safe-func-code
pnpm add nv-vali-is-safe-func-code
yarn add nv-vali-is-safe-func-code
bun add nv-vali-is-safe-func-code
```

## Health

**Score 15/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned; low maintenance score.

## Facts

| | |
|---|---|
| Version | 1.0.5 |
| Published | 2022-08-18 |
| First published | 2022-04-11 |
| Weekly downloads | 0 |
| License | ISC |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Unpacked size | 11.9 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Maintainers | ihgazni2 |

## Links

- npm: https://www.npmjs.com/package/nv-vali-is-safe-func-code
- npm.io page: https://npm.io/package/nv-vali-is-safe-func-code

## Dependencies (2)

- [nv-js-parse](https://npm.io/package/nv-js-parse.md) ^1.3.7
- [nv-facutil-kkject](https://npm.io/package/nv-facutil-kkject.md) ^1.0.0

## Recent versions

- 1.0.5 (latest) — 2022-08-18
- 1.0.4 — 2022-08-07
- 1.0.3 — 2022-08-07
- 1.0.2 — 2022-08-04
- 1.0.0 — 2022-04-11

## README

nv-vali-is-safe-func-code
===============
- nv-vali-is-safe-func-code   
- to check if a code-string of function/arrow-function from remote is safe for eval
- for nodejs server using

install
=======
- npm install nv-vali-is-safe-func-code 

usage
=====

        
          const {verify} = require("nv-vali-is-safe-func-code");

    
example
-------



        var cd =`
        function remote_func() {
            ()=>{
                fs.writeFileSync("a.tst","xxx")
            }
        }
        `

        /*
        verify(cd)
        [
          false,
          _E {
            start: Position { line: 4, column: 8 },
            end: Position { line: 4, column: 10 },
            reason: 'id_name_in_blacklist',
            code: 'fs'
          }
        ]

        */

        var cd =`
        function remote_func() {
               try {
                   require("xxxxx")
               } catch(e) {
               }
        }
        `

        /*
        verify(cd)
        [
          false,
          _E {
            start: Position { line: 4, column: 5 },
            end: Position { line: 4, column: 12 },
            reason: 'id_name_in_blacklist',
            code: 'require'
          }
        ]


        */



        var cd =`
        function remote_func() {
             import * as lib from "xxx"
        }
        `

        /*
        verify(cd)
        [
          false,
          _E {
            start: Position { line: 3, column: 12 },
            end: Position { line: 3, column: 20 },
            reason: 'ast_type_in_blacklist',
            code: '* as lib'
          }
        ]
        >

        */


        var cd =`
        function remote_func() {
             let b = XXXX;
             b.send();
        }
        `

        /*
        [
          false,
          _E {
            start: Position { line: 3, column: 13 },
            end: Position { line: 3, column: 17 },
            reason: 'have_no_binding',
            code: 'XXXX'
          }
        ]

API
====



        {
          verify: [Function: verify],
          ERRORS: Error(4) {
            'must_be_function_or_arrow_function',
            'ast_type_in_blacklist',
            'id_name_in_blacklist',
            'have_no_binding'
          },
          ID_BLACKLIST: Set(48) {
            'fs',
            'os',
            'module',
            'sys',
            'require',
            'import',
            'timers',
            'eval',
            'Function',
            'process',
            'global',
            'globalThis',
            'window',
            'constructor',
            'prototype',
            '__proto__',
            'getPrototypeOf',
            'setPrototypeOf',
            'deleteProperty',
            'setImmediate',
            'setTimeout',
            'setInterval',
            'v8',
            'vm',
            'Atomics',
            'Buffer',
            'buffer',
            'SharedArrayBuffer',
            'WebAssembly',
            'wasi',
            'async_hooks',
            'child_process',
            'cluster',
            'console',
            'readline',
            'repl',
            'dgram',
            'dns',
            'inspector',
            'http',
            'http2',
            'https',
            'net',
            'tls',
            'tty',
            'perf_hooks',
            'worker_threads',
            'trace_events',
            'domain'
          },
          AST_TYPE_BLACKLIST: BlackAstType(22) {
            'ThrowStatement',
            'DebuggerStatement',
            'V8IntrinsicIdentifier',
            'TSExportAssignment',
            'TSNamespaceExportDeclaration',
            'DeclareModuleExports',
            'DeclareExportDeclaration',
            'DeclareExportAllDeclaration',
            'ExportAllDeclaration',
            'ExportDefaultDeclaration',
            'ExportDefaultSpecifier',
            'ExportNamedDeclaration',
            'ExportNamespaceSpecifier',
            'ExportSpecifier',
            'ImportAttribute',
            'ImportDeclaration',
            'ImportDefaultSpecifier',
            'Import',
            'ImportNamespaceSpecifier',
            'ImportSpecifier',
            'TSImportEqualsDeclaration',
            'TSImportType'
          },
          GLOBAL_WHITE_LIST: GlobalPermit(80) {
            'AbortController',
            'AbortSignal',
            'AggregateError',
            'Array',
            'ArrayBuffer',
            'BigInt',
            'BigInt64Array',
            'BigUint64Array',
            'Boolean',
            'DataView',
            'Date',
            'Error',
            'EvalError',
            'Event',
            'EventTarget',
            'FinalizationRegistry',
            'Float32Array',
            'Float64Array',
            'Int16Array',
            'Int32Array',
            'Int8Array',
            'Intl',
            'JSON',
            'Map',
            'Math',
            'MessageChannel',
            'MessageEvent',
            'MessagePort',
            'Number',
            'Object',
            'Promise',
            'Proxy',
            'RangeError',
            'ReferenceError',
            'Reflect',
            'RegExp',
            'Set',
            'String',
            'Symbol',
            'SyntaxError',
            'TextDecoder',
            'TextEncoder',
            'TypeError',
            'URIError',
            'URL',
            'URLSearchParams',
            'Uint16Array',
            'Uint32Array',
            'Uint8Array',
            'Uint8ClampedArray',
            'WeakMap',
            'WeakRef',
            'WeakSet',
            '_error',
            'assert',
            'atob',
            'btoa',
            'constants',
            'crypto',
            'decodeURI',
            'decodeURIComponent',
            'encodeURI',
            'encodeURIComponent',
            'escape',
            'events',
            'isFinite',
            'isNaN',
            'parseFloat',
            'parseInt',
            'path',
            'performance',
            'punycode',
            'querystring',
            'queueMicrotask',
            'stream',
            'string_decoder',
            'unescape',
            'url',
            'util',
            'zlib'
          }
        }


LICENSE
=======
- ISC

---
_Source: https://npm.io/package/nv-vali-is-safe-func-code · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._