Kenneth Tay shows how to build arbitrary expressions to execute in dplyr’s filter
function:
This took me a while to figure out and so I thought I would post this as future reference. Let’s say I have the
mtcars
data and I want to filter for just the rows withcyl == 6
. I would do something like this:
library(tidyverse)
data(mtcars)
mtcars %>% filter(cyl == 6)
What if I had the filter condition as a string instead?
Read on to see how you can do this. Given the answer, I wonder if there’s any chance that could be turned into an injection vulnerability. H/T R-Bloggers