Just read some security related information about converting JSON into JavaScript objects.  The simplest way to convert JSON into an object is by using eval(). Here is the quote from the tutorial I was doing (http://code.google.com/webtoolkit/doc/latest/tutorial/JSON.html): 

"However, because eval() can execute any JavaScript code (not just JSON data) this approach has some serious security implications. Make sure the servers you interact with are absolutely trustworthy, because they will have the ability to execute arbitrary JavaScript code within your application. "

So we should definitely continue to actively discuss security of communication with the Opus Community site and proposed repository.



Dennis