@easyv/react-components 0.4.3 → 0.4.5

package/dist/InputNumber/interface.d.ts

@@ -8,6 +8,6 @@ interface XInputNumberProps extends Omit<InputNumberProps, 'value' | 'defaultVal
     onPressEnter?: (e: React.KeyboardEvent<HTMLInputElement>) => void;
     onPointMoveStart?: (value?: number) => void;
     onPointMoveEnd?: (value: number) => number;
-    onBlur: (e: any, value?: number) => void;
+    onBlur?: (e: any, value?: number) => void;
 }
 export { XInputNumberProps as InputNumberProps };

package/dist/InputNumber/util.d.ts

@@ -1,4 +1,4 @@
-export declare function evaluateExpression(exporssion: string): number;
+export declare function evaluateExpression(expression: string | number): number;
 interface SafeOptions {
     min?: number;
     max?: number;

package/dist/InputNumber/util.js

@@ -1,7 +1,30 @@
-export function evaluateExpression(exporssion) {
+export function evaluateExpression(expression) {
+  if (typeof expression === 'number') {
+    return expression;
+  }
+  if (typeof expression !== 'string' || !expression.trim()) {
+    return NaN;
+  }
+  var trimmed = expression.trim();
+
+  // 如果是纯数字字符串，直接返回数值
+  if (/^-?\d+(\.\d+)?$/.test(trimmed)) {
+    return parseFloat(trimmed);
+  }
+
+  // 检查是否是简单算术表达式（只包含数字、小数点、加减乘除和空格）
+  if (!/^[-+*/\d\s.()]+$/.test(trimmed)) {
+    return NaN;
+  }
   try {
-    // eslint-disable-next-line no-eval
-    return +eval(exporssion);
+    // 使用 Function 构造器替代 eval，更安全一些
+    var result = new Function('return ' + trimmed)();
+
+    // 确保结果是数字
+    if (typeof result === 'number' && !isNaN(result)) {
+      return result;
+    }
+    return NaN;
   } catch (e) {
     return NaN;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easyv/react-components",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "a react component library base on arco design",
   "license": "MIT",
   "sideEffects": [