DEV Community

Discussion on: Parse JSON string without JSON.parse and eval()

Collapse
 
fnh profile image
Fabian Holzer • Edited

Just to be perfectly clear: script injection is not a feature, it is a security vurnerabilty. And that jQuery, in an apparently rather old version, did this in its days, is no excuse to repeat the mistake in 2018.

Thread Thread
 
glauberfunez profile image
Glauber Funez

right and what would be the best way to do that since JSON.parse doesn't work because it has a function?
I ask that because I have a very similar scenario.