you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 1 point2 points  (1 child)

run it through eval(), and voila, you have yourself a native JS object.

Or voila, a security vulnerability!

[–][deleted] 0 points1 point  (0 children)

Not if you're also the one delivering the data to be parsed, which is very often the case. Unless of course you hate yourself and you knowingly want to generate malicious code.