Old write up on an old JSON vulnerability:
http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx/
It says if the server returns a JSON array as the return value, you're pretty much screwed.
Fourier Series visualization using D3.