Hacker Newsnew | past | comments | ask | show | jobs | submit | talnet's commentslogin

exactly


Hey thanks for the course pop up.


And OSI and many more.


yeah most of us.


Oh.. yeah 333_jlo


Anyway I love this.


You my friend really know how to poke.


I'm not sure if that's a good thing or a bad thing, but I'm amused regardless.


clever move we should say ? or any better idea ?


Even I use JSON.parse() without knowing its benefit :3


JSON.parse takes a string of "JSON" and turns it into a JS object. It doesn't evaluate the string in a JS context at all, which is what eval() does.

Some people have used eval() to do JSON parsing because JSON is a subset of JS, but if the user has any control into making malformed JSON, they could do so to create JS that can do anything the page can from the context of another user, otherwise known as Cross-Site-Scripting (XSS).


Dam this is cool.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: