Is it possible to load malicious code into a javascript program using a json file?

Question

JavaScript

In one program I read a local JSON file. Is there a theoretical possibility that malicious code will be added to JSON that will harm the user?

Answer 1

Well, if a site developer parses JSON in the old fashioned way via eval without checking the correct syntax, then yes, it is possible to execute malicious code. If through JSON.parse, then no, the JSON standard does not provide for calling functions, expressions, etc., and JSON.parse will determine during parsing that the syntax is incorrect and throw an error.