Hacker News Reader

The question to ask is: is the JSON coming from a trusted source (e.g. generated by your server and you can reasonably sure that you have no funny XSS holes)? If the answer is yes, eval()-ing JSON is perfectly safe. If the answer no, you need to parse it without the help of the JS interpreter.

And you should probably err on the safe side.

Firefox has a native JSON parser. http://blog.mozilla.com/webdev/2009/02/12/native-json-in-fir...

jQuery includes a proper parser

I think it was even being incorporated in browsers natively for maximum performance. It might be available already.

http://ejohn.org/blog/the-state-of-json/

Where?