mirror of
https://github.com/vercel/workflow.git
synced 2026-09-14 19:59:43 +08:00
Pranay Prakash
7d07fab692
* Replace eval with JSON.parse in serialization revive helper devalue.stringify() always produces valid JSON — special values (undefined, NaN, Infinity, -0) are encoded as negative integer sentinels. JSON.parse yields the same flattened array form that unflatten() expects, without the eval anti-pattern (VULN-918). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * Drop redundant workflow package from changeset Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
292 B
292 B
@workflow/core
| @workflow/core |
|---|
| patch |
Replace eval in serialization.ts revive() helper with JSON.parse. devalue.stringify() output is always valid JSON (special values are encoded as negative integer sentinels), so JSON.parse is a safe drop-in that eliminates the eval anti-pattern.