Redefining JS Array as security flaw

This is weird and cool - an article about how to avoid cross-site scripting security issues when returning a JSON object. The security flaw is the unobvious fact that in Javascript, even the Array constructor is a first-order object, thus permits redefinition.

Freaky! I like Javascript - very neat language.