Loading ...
Sorry, an error occurred while loading the content.

26830Re: datasource JSON string problem

Expand Messages
  • federico.galassi
    Mar 6, 2008
      --- In ydn-javascript@yahoogroups.com, "Satyam" <satyam@...> wrote:
      > Because it spares you from getting malicious code into your application. Ultimately, the
      JSON decoder does eval() your string but not before validating and ensuring it has no
      executable code in it, just values.

      malicious javascript is an exception, not the common case. Most ajax apps will
      be taking json from their own servers. How much is the perfomance penalty between
      parsing and eval'ing? is there a way to say datasource to just eval the string?

    • Show all 7 messages in this topic