No-New-Function

Sourcery rule id: no-new-function

Description

Never use the Function constructor.

Match

var subtract = Function('a', 'b', 'return a - b'); 

Explanation

Creating a function using the Function constructor evaluates a string similarly to eval() which may open up vulnerabilities.

From the Airbnb JavaScript Style Guide