imageMapster.js has a javascript eval()

[pbchase]

This module fails the REDCap module security scanner with

root@7106e6952520:/var/www/html# ./bin/scan modules/imagemap_v0.0.0/
Running composer install in /var/www/html/redcap_v13.9.3/ExternalModules/

js/imageMapster.js:12 - Please avoid the javascript eval() function. It is not currently possible to ensure its safety via automated scanning.

@123andy, where is this JS file sourced? Can we get an update?

[123andy]

There are newer versions of ImageMapster -- https://github.com/jamietre/ImageMapster/blob/main/dist/jquery.imagemapster.min.js

I'll create a ticket to update it but it may take a little while to do it and test it... Happy to accept a PR :-)

[ChemiKyle]

eval still exists in imageMapster.js, but PSALM no longer complains about it.

[dhinostroza]

https://github.com/jamietre/ImageMapster/blob/main/dist/jquery.imagemapster.min.js v 1.8.0, released May 1, 2024, is working nicely with REDCap v14.3.13. Just rename jquery.imagemapster.min.js to imageMapster.js and replace the file in the imagemap(_v1.12.0)/js folder.

[pbchase]

https://github.com/jamietre/ImageMapster/blob/main/dist/jquery.imagemapster.min.js v 1.8.0, released May 1, 2024, is working nicely with REDCap v14.3.13. Just rename jquery.imagemapster.min.js to imageMapster.js and replace the file in the imagemap(_v1.12.0)/js folder.

@dhinostroza care to submit a Pull Request? We'd be happy to test it, merge it, and release it.

[dhinostroza]

Pull Request sent.

[pbchase]

Pull Request sent.

Thanks. I had some issues with it so I assigned the review to @saipavan10-git. I expect you'll get some feedback soon.

[dhinostroza]

Sorry if I got that Pull Request wrong. It was my first time [blush].