Your JSON isn't valid (perhaps a double-quote is missing).
string before. Please keep in mind that if the content is not a JSON but
a command, evaluating the command can be dangerous if your browser allow
the instruction to be fired (like f.i. "alert('GOTTA!');")