From e96fe13e8cecbff909092d3d1fd5a60ac108a05f Mon Sep 17 00:00:00 2001
From: rudolfkoenig <rudolfkoenig@2b470e98-0d58-463d-a4d8-8e2adae1ed80>
Date: Sat, 17 Feb 2018 19:52:00 +0000
Subject: [PATCH] f18.js: check JSON via try and not via eval

git-svn-id: https://svn.fhem.de/fhem/trunk@16206 2b470e98-0d58-463d-a4d8-8e2adae1ed80
---
 fhem/www/pgm2/f18.js | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/fhem/www/pgm2/f18.js b/fhem/www/pgm2/f18.js
index 83b5276a0..d91981fdc 100644
--- a/fhem/www/pgm2/f18.js
+++ b/fhem/www/pgm2/f18.js
@@ -1,7 +1,7 @@
 "use strict";
 FW_version["f18.js"] = "$Id$";
 
-// TODO: hierMenu,absPos,floorplan,f18style.css
+// TODO: hierMenu,absPos,floorplan,f18style.css,menuBorder,SVGcolors,PWA:push
 var f18_attr, f18_aCol, f18_sd, f18_isMobile, f18_icon={}, f18_hasPos, f18_room;
 var f18_small = (screen.width < 480 || screen.height < 480);
 
@@ -267,8 +267,9 @@ f18_special()
     appendTo = "table#f18tr";
 
     addRow("room", "Target", '<select><option>all</option></select>');
-    FW_cmd(FW_root+"?cmd=JsonList2 .* room&XHR=1", function(data) {
-      var d = eval("JSON.parse(data);");
+    FW_cmd(FW_root+"?cmd=jsonlist2 .* room&XHR=1", function(data) {
+      var d;
+      try { d=JSON.parse(data); } catch(e){ log(data); return FW_okDialog(e); }
       for(var i1=0; i1<d.Results.length; i1++) {
         var rname = d.Results[i1].Attributes.room;
         if(!rname || rname == "hidden")