4 ms·
Not eval() -- it's a defense against "JSON hijacking" attacks where a malicious site uses a <script src="some other site's JSON file"> tag to steal credentials/
by eurleif 4y ago
Not eval() -- it's a defense against "JSON hijacking" attacks where a malicious site uses a <script src="some other site's JSON file"> tag to steal credentials/etc.