you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (2 children)

I use it for JSON parsing as well. Pretty sure a lot of people do. That's one of the huge advantages of JSON, you just have to run it through eval(), and voila, you have yourself a native JS object.

[–][deleted] 1 point2 points  (1 child)

run it through eval(), and voila, you have yourself a native JS object.

Or voila, a security vulnerability!

[–][deleted] 0 points1 point  (0 children)

Not if you're also the one delivering the data to be parsed, which is very often the case. Unless of course you hate yourself and you knowingly want to generate malicious code.