export function unsafeDeserialize(data) { return eval("(" + data + ")"); // NOT OK } export function unsafeGetter(obj, name) { return eval("obj." + name); // NOT OK } export function safeAssignment(obj, value) { eval("obj.foo = " + JSON.stringify(value)); // OK } global.unsafeDeserialize = function (data) { return eval("(" + data + ")"); // NOT OK } const matter = require("gray-matter"); export function greySink(data) { const str = ` ---js ${data} --- ` const res = matter(str); console.log(res); matter(str, { // OK engines: { js: function (data) { console.log("NOPE"); } } }); }