<@UHQFWH30Q> what are you actually hoping to achie...
# suitescriptj
jen
12/30/2019, 10:21 PM@David Durst what are you actually hoping to achieve? I've used embedded JS to execute when the page loads, for example you could have an inlineHTML field that has alert('whatever'); as the default value.
d
David Durst
12/30/2019, 10:23 PMWhat I am trying to achieve is extracting data from inbound cases using regex and in order to properly place that data once extracted I can either limit the fields and records or I can allow a define a function in JS (In a field) that will know how to handle the data once extracted.
j
jen
12/30/2019, 10:25 PMCould you not achieve the above with UserEvent ?
d
David Durst
12/30/2019, 10:27 PMIts possible to do that but then I would have to define every single potential case
David Durst
12/30/2019, 10:27 PMCurrently our existing system has over 4000 unique cases that are defined at a user level
m
michoel
12/30/2019, 10:27 PMd
David Durst
12/30/2019, 10:27 PM@michoel will this eval suitescript?
m
michoel
12/30/2019, 10:28 PMWarning: Executing JavaScript from a string is an enormous security risk. It is far too easy for a bad actor to run arbitrary code when you use. See Never use eval()!, below.eval()
d
David Durst
12/30/2019, 10:28 PM@michoel yeah I am aware
David Durst
12/30/2019, 10:29 PMIf the bad actor has gotten that far he already has JS console access so………….
m
michoel
12/30/2019, 10:29 PMI haven't tried using it in SS but it's part of the JS spec so I would be surprised if it doesn't work
d
David Durst
12/30/2019, 10:29 PMwish me luck 🙂
David Durst
12/30/2019, 10:30 PMactually I suspect it does probably work and its likely how they are doing Client Side Script execution
m
michoel
12/30/2019, 10:33 PMI would definitely strongly consider alternatives before using eval
👍 1
10 Views