JSON security issues?

Question

Are there any security issues in using JSON for just data transfer, other than that it is plain text? Like, the eval() which poses a security issue when used in JavaScript. Are there any such issues, when JSON is just used to transfer data between computers and read by programs written in Java etc

Answer 1

JSON can be used to execute JavaScript insertion attacks against any web client that uses it, unless the server (and only the server) takes appropriate precautions.

Answer 2

http://www.xml.com/cs/user/view/cs_msg/3370

http://directwebremoting.org/blog/joe/2007/03/05/json_is_not_as_safe_as_people_think_it_is.html

Answer 3

Certainly. Sending out passwords unencrypted using JSON would be clearly a security issue. In general, JSON itself are just bytes; it's the interpretation that's given to them which may cause harm.