Question

Which are the two functions that are not allowed in any secure subset?

(a) evaluate() and restrict()

(b) eval() and the Function() constructor

(c) debugger() and test()

(d) eval() and debugger()

Answer 1

Right answer is (b) eval() and the Function() constructor

To explain: eval() and the Function() constructor are not allowed in any secure subset because they allow the execution of arbitrary strings of code, and these strings cannot be statically analyzed.