[compiler][playground] parse compiler configs using json5 (#36159) (opens in new tab)
Compiler config parsing is currently done with new Function(...) which is a XSS vulnerability. Replacing this with json parsing for safety reasons. Almost all compiler options (except for moduleTy...
Read the original article