Remove the use of eval()

rikumi · Jun 30, 2024 · 5bfe6a1 · 5bfe6a1
1 parent 7ddef07
commit 5bfe6a1
Show file tree

Hide file tree

Showing 3 changed files with 66 additions and 4 deletions.
diff --git a/package.json b/package.json
@@ -29,6 +29,7 @@
     "dayjs": "^1.11.10",
     "discord-emoji": "^2.4.0",
     "discord-user-bots": "^1.6.0",
+    "mathjs": "^13.0.1",
     "matrix-bot-sdk": "^0.7.1",
     "minecraft-protocol": "^1.36.1",
     "nodejieba": "^2.6.0",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/src/commands/count.ts b/src/commands/count.ts
@@ -1,4 +1,5 @@
 import { GenericMessage } from 'src/clients/base';
+import { evaluate } from 'mathjs';
 
 export const USAGE = `<number|expression> [StackCount] 计算在 MC 中的易读数字表达`;
 
@@ -67,7 +68,7 @@ export const handleSlashCommand = async (message: GenericMessage) => {
   };
   try {
     // 尝试计算结果
-    const expResult = eval(expression);
+    const expResult = evaluate(expression);
     return `${message.userName} ${countItem(expResult)}！`;
   } catch (error) {
 		return `${message.userName} 计算出错！`;