Question

I’m wondering if Eval() is the only option I really have for calling scripts on my server and also executing the javascript on those files.

I see every where about security issue with Eval and people don’t recommend it – so is there any safe way to request files with javascript and execute that JS ?

Answer 1

No, you don’t have to eval, although if you trust the input doing so is alright. It is still better to transfer only data and not running code.

You can dynamically create a script tag:

var script = document.createElement('script');
script.src = 'path/to/javascript/to/run';
document.body.appendChild(script);