use get instead of eval as more secure

timcadman · timcadman · commit 40eb96a8bbec · 2026-01-09T11:30:05.000+01:00
diff --git a/R/utils.R b/R/utils.R
@@ -8,7 +8,7 @@
 #' @noRd
 .loadServersideObject <- function(x) {
   tryCatch(
-    eval(parse(text = x), envir = parent.frame(2)), 
+    get(x, envir = parent.frame(2)), 
     error = function(e) {
       stop("The server-side object", " '", x, "' ", "does not exist")
     }

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@`
`8`	`8`	`#' @noRd`
`9`	`9`	`.loadServersideObject <- function(x) {`
`10`	`10`	`tryCatch(`
`11`		`- eval(parse(text = x), envir = parent.frame(2)),`
	`11`	`+ get(x, envir = parent.frame(2)),`
`12`	`12`	`error = function(e) {`
`13`	`13`	`stop("The server-side object", " '", x, "' ", "does not exist")`
`14`	`14`	`}`