开发者

Alternative to eval()

I'm looking for an alternative 开发者_运维百科to that code:

 expl = eval "BeEF::Modules::Exploits::#{klass.capitalize}.new"

Here the eval is totally insecure. Is there an alternative I could use to generate dynamically classes without using eval? As in, klass is always different. So my code stays generic.

Thanks for your time.


You can use Module#const_get:

expl = BeEF::Modules::Exploits.const_get(klass.capitalize).new
0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜