2 ms·
It's discouragement from using eval to parse JSON. I remember reading a blog post on here a while back about it, but I can't seem to find it anymore.
by OkayPhysicist 4y ago
It's discouragement from using eval to parse JSON. I remember reading a blog post on here a while back about it, but I can't seem to find it anymore.
- eurleif 4y agoNot eval() -- it's a defense against "JSON hijacking" attacks where a malicious site uses a <script src="some other site's JSON file"> tag to steal credentials/etc.