What specifically are the dangers of eval(parse(…))?

by

Most of the arguments against eval(parse(...)) arise not because of security concerns, after all, no claims are made about R being a safe interface to expose to the Internet, but rather because such code is generally doing things that can be accomplished using less obscure methods, i.e. methods that are both quicker and more human parse-able. The R language is supposed to be high-level, so the preference of the cognoscenti (and I do not consider myself in that group) is to see code that is both compact and expressive.

So the danger is that eval(parse(..)) is a backdoor method of getting around lack of knowledge and the hope in raising that barrier is that people will improve their use of the R language. The door remains open but the hope is for more expressive use of other features. Carl Witthoft’s question earlier today illustrated not knowing that the get function was available, and the question he linked to exposed a lack of understanding of how the [[ function behaved (and how $ was more limited than [[). In both cases an eval(parse(..)) solution could be constructed, but it was clunkier and less clear than the alternative.

More Related Contents:

  1. How to convert string rule to an expression which has a range in R [closed]
  2. Evaluate expression given as a string
  3. Why would R use the “L” suffix to denote an integer?
  4. How to avoid warning when introducing NAs by coercion
  5. R: eval(parse(…)) is often suboptimal
  6. how to apply a function on a data set?
  7. Error in : object of type ‘closure’ is not subsettable
  8. How do I save warnings and errors as output from a function?
  9. Applying a function to every row of a table using dplyr?
  10. Reverse stacked bar order
  11. How to display only integer values on an axis using ggplot2
  12. Aggregate multiple columns at once [duplicate]
  13. What is meaning of first tilde in purrr::map
  14. Place a legend for each facet_wrap grid in ggplot2
  15. Import text file as single character string
  16. R tick data : merging date and time into a single object
  17. Finding the indexes of multiple/overlapping matching substrings
  18. Controlling line color and line type in ggplot legend
  19. R Shiny: reactiveValues vs reactive
  20. Add a “rank” column to a data frame
  21. Creating a summary statistical table from a data frame
  22. Find the intersection of overlapping ranges in two tables using data.table function foverlaps
  23. How to make graphics with transparent background in R using ggplot2?
  24. Referring to data.table columns by names saved in variables
  25. What is integer overflow in R and how can it happen?
  26. How to extract Month from date in R
  27. R semicolon delimited a column into rows
  28. ggplot2 does not appear to work when inside a function R [duplicate]
  29. Convert a dataframe to a vector (by rows)
  30. Get all the rows with rownames starting with ABC111

Leave a Comment