Consequently, they can be used to implement JavaScript insertion attacks against a web client, like a command injection or cross-site scripting. For example, if a hacker inserts non-JSON code into a ...

JavaScript APIs have stretched the boundaries of what is run in the browser to enable feature-rich web applications. But this comes at a price ...