COLDBOX-1278 #resolve

Remove unsafe evaluate function usage
ColdBox · Apr 22, 2024 · 715224a · 715224a
1 parent 42e7706
commit 715224a
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/system/core/dynamic/MixerUtil.cfc b/system/core/dynamic/MixerUtil.cfc
@@ -161,7 +161,16 @@ component {
 	 * Removes a method in a CFC
 	 */
 	function removePropertyMixin( required propertyName, scope = "variables" ){
-		structDelete( evaluate( arguments.scope ), arguments.propertyName );
+		switch( arguments.scope ){
+			case "variables":
+				return structDelete( variables, arguments.propertyName );
+				break;
+			case "this":
+				structDelete( this, arguments.propertyName );
+				break;
+			default:
+				throw( "Invalid scope" );
+		}
 		return this;
 	}