Does Knockout JS use eval()?

[aaronc...@gmail.com]

Seems completely obvious that it should, but I searched the source code, and I can't find one reference to eval(). How is that possible? Just curious.

[Randy Crews]

I can't speak for the authors but my assumption would be that it is not there because eval() can introduce opportunities for injection, is less readable, makes debugging difficult and some sites even block the eval() function from executing  which could cause problems as well. I have read blogs as well where eval() causes code to execute slower when used for string evaluation over code evaluation.  As I said I am taking a guess as why it may not be used so I may be completely wrong.

-cheers

[rpn]

Knockout does use a Function constructor as described here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function, which is similar to using eval.  This is strictly used as part of parsing and evaluating the string in a data-bind attribute.

[aaronc...@gmail.com]

Wow. That's great. I never knew such a thing existed, and it makes perfect sense now. Does anyone know how this method compares to straight eval()? Is it more secure? More efficient?

[Michael Best]

Here's some info on the topic.

[Michael Best]

Sorry here's the link: http://stackoverflow.com/questions/4599857/is-eval-and-new-function-the-same-thing