[sebazzz]

It was just a matter of:

    var myObject = eval(httpResponseBody)

Of course, this is vulnerable to all kinds of issues so we got JSON parser, and later JSON became part of the Web API.

[cosmotic]

I remember the infinite loops stuffed into JSON results to prevent this sort of thing.