It is designed as a class, so the allowed globals can be customised. build(code): builds the code into a function, without executing it. preprocess(code): preprocess ...

So, you've seen a lot of people on the Discord.js Official server use some sort of eval command. When they do, magical things happen - arbitrary javascript is executed and output is produced. MAGIC!

In an effort to mitigate a large class of potential cross-site scripting issues in Firefox, Mozilla has blocked execution of all inline scripts and potentially dangerous eval-like functions for ...

A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a CVSS score of 9.8, affects hundreds of projects and is forcing developers to ...