JSON.parse() is safer than eval()