remove and aviod javascript eval() calls #377
Description
use JSON (native or JSON.org) parser to parse ajax response to JSON instead of eval('(' + transport.responseText + ')')
eval('var value = taxRates.value_' + taxClass); can be written as var value = taxRates['value_' + taxClass];