Let's say I want to use AJAX to retrieve a json file from an untrusted different domain. I then parse the response as a javascript object without any script evaluation. (A cookie is not sent with my request.)Let's say I want to use AJAX to retrieve a json