It is designed as a class, so the allowed globals can be customised. build(code): builds the code into a function, without executing it. preprocess(code): preprocess ...

So, you've seen a lot of people on the Discord.js Official server use some sort of eval command. When they do, magical things happen - arbitrary javascript is executed and output is produced. MAGIC!

In an effort to mitigate a large class of potential cross-site scripting issues in Firefox, Mozilla has blocked execution of all inline scripts and potentially dangerous eval-like functions for ...

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be exploited to execute code remotely through maliciously crafted input. The ...