Consequently, they can be used to implement JavaScript insertion attacks against a web client, like a command injection or cross-site scripting. For example, if a hacker inserts non-JSON code into a ...

That is the built-in mechanism for JavaScript programs to take an in-memory object representation and turn it into a JSON string. To go in the other direction—that is, take a JSON string and ...