diff --git a/resources/js/rambox-service-api.js b/resources/js/rambox-service-api.js index 7687dbfa..6d5289c7 100644 --- a/resources/js/rambox-service-api.js +++ b/resources/js/rambox-service-api.js @@ -65,3 +65,11 @@ Notification.permission = NativeNotification.permission; Notification.requestPermission = NativeNotification.requestPermission.bind(Notification); window.close = function() { location.href = location.origin }; + +/** + * Disable eval for security reasons. + */ + // eslint-disable-next-line no-eval + window.eval = global.eval = function () { + throw new Error(`Sorry, this app does not support window.eval().`); + };