To be fair, it does escape characters and verify with a regex that the data is actually JSON before eval-ing it.