Just read some security related information about converting JSON into
JavaScript objects. The simplest way to convert JSON into an object is by
using eval(). Here is the quote from the tutorial I was doing (
http://code.google.com/webtoolkit/doc/latest/tutorial/JSON.html):
"However, because eval() can execute any JavaScript code (not just JSON
data) this approach has some serious security implications. Make sure the
servers you interact with are *absolutely trustworthy*, because they will
have the ability to execute arbitrary JavaScript code within your
application. "
So we should definitely continue to actively discuss security of
communication with the Opus Community site and proposed repository.
Dennis
