Alternatives to JavaScript eval() for parsing JSON

前端 未结 9 1287
忘了有多久
忘了有多久 2020-12-01 08:23

Quick Question. Eval in JavaScript is unsafe is it not? I have a JSON object as a string and I need to turn it into an actual object so I can obtain the data:



        
9条回答
  •  自闭症患者
    2020-12-01 08:59

    You should use JSON and write JSON.parse.

    "Manual" parsing is too slow, so JSON.parse implementation from the library checks stuff and then ends up using eval, so it is still unsafe. But, if you are using a newer browser (IE8 or Firefox), the library code is not actually executed. Instead, native browser support kicks in, and then you are safe.

    Read more here and here.

提交回复
热议问题