Altova Mailing List Archives>Archive Index >xml-dev Archive Home >Recent entries >Thread Prev - Maximally Consumable Data [Thread Next] RE: [xml-dev] Maximally Consumable DataTo: <xml-dev@-----.---.---> Date: 4/7/2008 12:24:00 PM Hi Rob, > But, you have to 'eval' it making a > potential security threat. In the book, Bulletproof Ajax, by Jeremy Keith, he says (p. 87): "In order to extract the contents of a JSON object, it must be evaluated. The eval function is powerful, and potentially dangerous. If you're retrieving JSON data from a third party that isn't entirely trustworthy, it could contain some malicious JavaScript code that will be executed with eval. For this reason Douglas Crockford has written a JSON parser that will parse only properties, ignoring any methods (http://www.json.org/js.html)." /Roger | ||||||
| Company | Legal | Press | Partners | Careers | Sitemap | Contact Us | Altova Blog | Mobile | Full Site | |||
|
