Hacker News Reader

eval() isn't quite the same. It's unsafe for starters: it permits any JS code, not just JSON.

But JavaScript has the JSON object offering a high-quality, high-performance parser (JSON.parse) and serialiser (JSON.stringify).

View on HN

Its funny how JSON emerged as subset of JavaScript - easy to parse with eval(). But now if you do that its terrible code. So the subset aspect is totally irrelevant now.

The subset aspect is indeed still relevant. JSONP callbacks[0] make use of JSON's just-JavaScript nature.

[0] https://en.wikipedia.org/wiki/JSONP

In old browsers, yes. The much more secure CORS is now an option, however.

Reply on news.ycombinator.com