Meta Box

Security risk: please fix!

Support › MB REST API › Security risk: please fix!Resolved

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • September 22, 2023 at 10:37 PM #43325
    danieldkdanieldk
    Participant

    the file 'meta-box-aio/vendor/meta-box/meta-box-builder/src/RestApi/ThemeCode/Encoder.php' contains the following line (115):

    $field_args = ! empty( $this->field_args ) ? eval( 'return [' . implode( ', ', $this->field_args ) . '];' ) : [];

    My security software flags this as a security risk. Would it be possible to change that line?

    September 23, 2023 at 11:27 AM #43333
    PeterPeter
    Moderator

    Hello Daniel,

    Thanks for your feedback.

    I'm discussing this case with the development team and I will let you know when I have any information.

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.