Home. 
.

transparent

transparent

transparent

Altova Mailing List Archives


RE: [xml-dev] Maximally Consumable Data

From: "Costello, Roger L." <costello@-----.--->
To: <xml-dev@-----.---.--->
Date: 4/7/2008 12:24:00 PM
Hi Rob,
 
> But, you have to 'eval' it making a 
> potential security threat.

In the book, Bulletproof Ajax, by Jeremy Keith, he says (p. 87):

"In order to extract the contents of a JSON object, it must be
evaluated.  The eval function is powerful, and potentially dangerous.
If you're retrieving JSON data from a third party that isn't entirely
trustworthy, it could contain some malicious JavaScript code that will
be executed with eval.  For this reason Douglas Crockford has written a
JSON parser that will parse only properties, ignoring any methods
(http://www.json.org/js.html)."

/Roger


transparent
Print
Mail
Like It
Disclaimer
.

These Archives are provided for informational purposes only and have been generated directly from the Altova mailing list archive system and are comprised of the lists set forth on www.altova.com/list/index.html. Therefore, Altova does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content on the Altova Mailing List Archive(s), regardless of who originates that content. You expressly understand and agree that you bear all risks associated with using or relying on that content. Altova will not be liable or responsible in any way for any content posted including, but not limited to, any errors or omissions in content, or for any losses or damage of any kind incurred as a result of the use of or reliance on any content. This disclaimer and limitation on liability is in addition to the disclaimers and limitations contained in the Website Terms of Use and elsewhere on the site.

.
.

transparent

transparent