Hi! >> JSON is a subset of Javascript, >> so we can use a simple call "eval()" to parse the configuration file. Wouldn't that be dangerous for something like "script injection"? One might be able to pass in a faked JSON string with some code in there which will be executed on eval() then, no?
Ciao, Mario --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
