Rayan Salhab 0c7cc11392 fix(security): replace new Function() with safe math expression parser ... Replace the dangerous new Function() constructor in evaluateMathExpression() with a recursive descent parser that safely evaluates basic arithmetic expressions. The Function constructor is a security anti-pattern that could enable arbitrary code execution if the validation regex is ever bypassed or relaxed. The new parser: - Only supports numbers, +, -, *, /, parentheses, and whitespace - Has no eval-like functionality that could execute arbitrary code - Maintains backward compatibility with existing expressions - Handles operator precedence and parentheses correctly Fixes #725		2026-03-26 22:33:56 +00:00
..
web	fix(security): replace new Function() with safe math expression parser	2026-03-26 22:33:56 +00:00