How Do I Safely Execute a JavaScript String in a Browser?

Executing Strings of JavaScript Code

In some scenarios, you may encounter the need to execute JavaScript code stored as a string. Consider the following code snippet:

function ExecuteJavascriptString() {
  var s = "alert('hello')";
  // how do I get a browser to alert('hello')?
}

To execute the code stored in the string s, you can utilize the eval function. Here's an example:

eval("alert('hello')");

However, it's crucial to exercise caution when using eval. The MDN documentation strongly discourages using eval to execute code from strings, highlighting the significant security risks it poses.

The above is the detailed content of How Do I Safely Execute a JavaScript String in a Browser?. For more information, please follow other related articles on the PHP Chinese website!