Skip to main content

What"s the better practice: eval or append script?


I need to execute a custom piece of JavaScript I got from some AJAX call. I could do an eval of the string or I could just append it in a script -tag to the DOM. Which method would be better?




var dynamicScript = 'alert(\'Hello world!\');';



Method 1 - Script :




var x = '<script type="text/javascript">' + dynamicScript +'</scr' + 'ipt>';
$(document.body).append(x);



Method 2 - Eval :




eval(dynamicScript);



What method is better and why? Or is there an ever better alternative?


Source: Tips4allCCNA FINAL EXAM

Comments

  1. I prefer eval, because it's generally faster than creating a script tag, and appending it (especially if you wanted to create and insert it using jQuery).

    Side note (useful application of a script tag) I also use the script-tag-insertion method: In Google Chrome's extensions, injecting script-tags is the only way to run code in the scope of a page, because the window object is sandboxed.

    PS. Notion of jQuery.getScript(). This method might be useful.

    ReplyDelete
  2. Neither method is really that good for what you're doing. Your AJAX call should be returning data not serialized scripts. Both of your methods open you up to script injection.

    eval should be avioded at all costs. It's slow and dangerous, eval is evil

    ReplyDelete
  3. If the ajax call is returning html with script tags, you can use $.load() to import the script.

    http://api.jquery.com/load/

    ReplyDelete

Post a Comment

Popular posts from this blog

Slow Android emulator

I have a 2.67 GHz Celeron processor, 1.21 GB of RAM on a x86 Windows XP Professional machine. My understanding is that the Android emulator should start fairly quickly on such a machine, but for me it does not. I have followed all instructions in setting up the IDE, SDKs, JDKs and such and have had some success in staring the emulator quickly but is very particulary. How can I, if possible, fix this problem?