Merge pull request #725 from tomaioo/fix/security/arbitrary-code-execution-via-eval-in-men

fix(security): 2 improvements across 2 files

Author: magnussolution

app/model/GroupModule.js

@@ -17,7 +17,7 @@ Ext.define('MBilling.model.GroupModule', {
         name: 'idModuletext',
         type: 'string',
         convert: function(value) {
-            return eval(value);
+            return value;
         }
     }, {
         name: 'show_menu',

app/model/Menu.js

@@ -24,7 +24,7 @@ Ext.define('MBilling.model.Menu', {
     fields: [{
         name: 'text',
         convert: function(value) {
-            return (value.indexOf('t(') !== -1) ? eval(value) : value;
+            return value;
         }
     }, 'module', 'action', 'iconCls', 'rows']
 });