Comments on: Introduction to JSON (JavaScript Object Notation) http://www.seangw.com/wordpress/2009/02/introduction-to-json-javascript-object-notation/ Flash, HTML, Actionscript, XML, Javascript, AJAX, CSS, iPhone and other geeky topics Sat, 04 Feb 2012 19:48:19 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Peterhttp://www.seangw.com/wordpress/2009/02/introduction-to-json-javascript-object-notation/comment-page-1/#comment-124 Peter Thu, 05 Mar 2009 11:07:31 +0000 http://www.seangw.com/wordpress/?p=379#comment-124 Crockford's JSON parser will properly parse (not eval!) the JSON string. However, at the time of writing this, jQuery still uses eval [<code>if ( type == "json" ) data = window["eval"]("(" + data + ")");</code>]. Crockford’s JSON parser will properly parse (not eval!) the JSON string. However, at the time of writing this, jQuery still uses eval [if ( type == "json" ) data = window["eval"](“(” + data + “)”);].

]]> By: seangwhttp://www.seangw.com/wordpress/2009/02/introduction-to-json-javascript-object-notation/comment-page-1/#comment-121 seangw Mon, 02 Mar 2009 21:17:58 +0000 http://www.seangw.com/wordpress/?p=379#comment-121 Joshua is correct, you should not directly use "eval(code)" in JS as it is a high security risk. Use an existing JSON parser (jQuery for example).If the source is absolutely secure (no user entered data, etc.) you can use "eval", it is very fast doing this directly without parsing. Just know, that any non-trusted content makes that a high risk method. Joshua is correct, you should not directly use “eval(code)” in JS as it is a high security risk. Use an existing JSON parser (jQuery for example).

If the source is absolutely secure (no user entered data, etc.) you can use “eval”, it is very fast doing this directly without parsing. Just know, that any non-trusted content makes that a high risk method.

]]> By: Joshua Kuglerhttp://www.seangw.com/wordpress/2009/02/introduction-to-json-javascript-object-notation/comment-page-1/#comment-120 Joshua Kugler Mon, 02 Mar 2009 21:05:07 +0000 http://www.seangw.com/wordpress/?p=379#comment-120 As a rule, do NOT use eval(code) to parse your JSON data. If you ever have user provided content inside JSON encoded data, you could execute malicious javascript in that user's browser. Taken a look at the JSON parsers at http://json.org/ As a rule, do NOT use eval(code) to parse your JSON data. If you ever have user provided content inside JSON encoded data, you could execute malicious javascript in that user’s browser. Taken a look at the JSON parsers at http://json.org/

]]>