Why do some Facebook endpoints have this for(;;):{?

6 pointsjmallone5 comments

Some facebook endpoints return this feature that I've never seen, can anyone explain to me why?

Enter the Link ( https://www.facebook.com/ads/library/?active_status=all&ad_type=political_and_issue_ads&country=BR&view_all_page_id=1216504185136925&sort_data[direction]=desc&sort_data[mode]=relevancy_monthly_grouped&search_type=page&media_type=all ) and analyze the Traffic

View on HN

https://stackoverflow.com/questions/3146798/why-do-people-pu...

This is the answer OP should've found instead of being yet another user who's turning HN to StackOverflow/LMGTFY...

Thanks for replying, I didn't know how to structure the question on Google, the searches I did "for(;;): in response" , "for(;;): in json" "for(;;): traffic https" They didn't give me anything concrete.

Now I know what it's for and I could get out of ignorance, thanks.

It's discouragement from using eval to parse JSON. I remember reading a blog post on here a while back about it, but I can't seem to find it anymore.

Not eval() -- it's a defense against "JSON hijacking" attacks where a malicious site uses a <script src="some other site's JSON file"> tag to steal credentials/etc.

Reply on news.ycombinator.com