← Back to context

Comment by mschuster91

2 months ago

I've written my fair share of evil shit in VBA.

But... what is effectively eval() just in VB? Yikes.

2 comments

mschuster91

Reply
moron4hire  2 months ago

For the people who would be using this, they would almost never even have other people's code, say nothing of whether it's untrusted.

n013  2 months ago

Honestly, ASF is literally sandboxed. Objects cannot be injected in the runtime. Also, VBA Expressions is intentionally limited to receive and return VBA strings. So, the system is safe for execute code from (almost) anyone.