Back out the try/catch logic from around JSON.parse. We should always try to use it, otherwise security will suffer.

jeresig · jeresig · commit c14fa516ae55 · 2010-01-07T11:54:26.000-05:00
diff --git a/src/ajax.js b/src/ajax.js
@@ -578,10 +578,10 @@ jQuery.extend({
 			// Get the JavaScript object, if JSON is used.
 			if ( type === "json" || !type && ct.indexOf("json") >= 0 ) {
 				// Try to use the native JSON parser first
-				try {
-					data = JSON.parse( data );
+				if ( window.JSON && window.JSON.parse ) {
+					data = window.JSON.parse( data );
 
-				} catch(e) {
+				} else {
 					data = (new Function("return " + data))();
 				}
 			}

Original file line number	Diff line number	Diff line change
`@@ -578,10 +578,10 @@ jQuery.extend({`
`578`	`578`	`// Get the JavaScript object, if JSON is used.`
`579`	`579`	`if ( type === "json" \|\| !type && ct.indexOf("json") >= 0 ) {`
`580`	`580`	`// Try to use the native JSON parser first`
`581`		`- try {`
`582`		`- data = JSON.parse( data );`
	`581`	`+ if ( window.JSON && window.JSON.parse ) {`
	`582`	`+ data = window.JSON.parse( data );`
`583`	`583`
`584`		`- } catch(e) {`
	`584`	`+ } else {`
`585`	`585`	`data = (new Function("return " + data))();`
`586`	`586`	`}`
`587`	`587`	`}`