JSON now throws an error if security is enabled and a string fails de…

…coding due to security.
mootools · Aug 6, 2009 · 1a0d5b5 · 1a0d5b5
1 parent 5935851
commit 1a0d5b5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Source/Utilities/JSON.js b/Source/Utilities/JSON.js
@@ -38,7 +38,8 @@ var JSON = new Hash({
 
 	decode: function(string, secure){
 		if ($type(string) != 'string' || !string.length) return null;
-		if (secure && !(/^[,:{}\[\]0-9.\-+Eaeflnr-u \n\r\t]*$/).test(string.replace(/\\./g, '@').replace(/"[^"\\\n\r]*"/g, ''))) return null;
+		if (secure && !(/^[,:{}\[\]0-9.\-+Eaeflnr-u \n\r\t]*$/).test(string.replace(/\\./g, '@').replace(/"[^"\\\n\r]*"/g, ''))) 
+			throw new Error('JSON could not decode the input; security is enabled and the value is not secure.');
 		return eval('(' + string + ')');
 	}