Quotes About JSON

In summary, serialization is dangerous and should be avoided. If you are designing a system from scratch, use a cross-platform structured-data representation such as JSON or protobuf instead. Do not deserialize untrusted data. If you must do so, use object deserialization filtering, but be aware that it is not guaranteed to thwart all attacks. Avoid writing serializable classes. If you must do so, exercise great caution.

In fact, the biggest misconception is that you can call your API RESTful if its delivering XML or JSON over HTTP. And that misconception and the resulting proliferation of horrible APIs is likely the source of RESTafarian irritation with the application of the term "RESTful" in an API context. But let's be brutally honest. Most interactive systems don't follow this model either.

Instead of passing our callback function directly to getJSON(), we instead pass it to the then() method. When the HTTP response arrives, the body of that response is parsed as JSON, and the resulting parsed value is passed to the function that we passed to then().