Un-Serialising data from a file, without eval

i'm playing writing data file can persist between sessions. i'm using

f.write(data.tosource());

to save data, f file object, and

var data = eval(f.read());

to data file. seems insecure way of doing things. sure it's unlikely going use, aescript preference files backdoor, that's still security through obscurity.

 

is there way read serialised data file without using eval()? or have roll-my-own parser / serialiser safely?

turns out question has answer here:

read in json file , dont eval · fabiantheblind/extendscript wiki · github

More discussions in After Effects Scripting

adobe