Skip to content

Commit b950fdd

Browse files
committed
Remove eval block from palette due to security concerns.
1 parent c49472a commit b950fdd

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

js/basicblocks.js

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2356,6 +2356,7 @@ function initBasicProtoBlocks(palettes, blocks) {
23562356
evalBlock.twoArgMathBlock();
23572357
evalBlock.dockTypes[1] = 'textin';
23582358
evalBlock.defaults.push('abs(x)');
2359+
evalBlock.hidden = true; // security hole
23592360
evalBlock.defaults.push(-100);
23602361

23612362
var modBlock = new ProtoBlock('mod');
@@ -2413,6 +2414,8 @@ function initBasicProtoBlocks(palettes, blocks) {
24132414
negBlock.fontsize = 14;
24142415
negBlock.staticLabels.push('–');
24152416
negBlock.oneArgMathBlock();
2417+
negBlock.dockTypes[0] = 'anyout';
2418+
negBlock.dockTypes[1] = 'anyin';
24162419

24172420
var minusBlock = new ProtoBlock('minus');
24182421
minusBlock.palette = palettes.dict['number'];

0 commit comments

Comments
 (0)