happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript
Critical severity
GitHub Reviewed
Published
Oct 15, 2025
in
capricorn86/happy-dom
•
Updated Nov 27, 2025
Give feedback on Dependabot alerts