Remove eval function

[euharrison]

Hi! I received an alert from my host that the script has a suspicious eval() code, this is the alert:

Debugging it I found that this code came from here https://github.com/auth0/jwt-decode/blob/master/build/jwt-decode.js#L56

Do you think that we have a workaround with this eval function?

[jfromaniello]

It is using eval as a fallback when there is no JSON support in the browser... maybe we can remove that since it seems is already supported in every major browser:

http://caniuse.com/#feat=json

and if the developer really needs to support old browser he can polyfill on their own before loading this library.

[sandstrom]

@jfromaniello sounds like a great solution! JSON is widely supported, and there are good polyfills available for those rare, old browsers.

[jfromaniello]

thanks!