cjsaylor
2/7/2013 - 4:55 AM

index.html

[
  {
    email: 'some-email'
  }
]
$.ajax('/user/emails', {
  'complete': function(response) {
    parsedResponse = JSON.parse(response.substr(9));
  }
});
Array = function(data) {
  // Upload contents of data to attacker's server
};
<script src="/user/emails" type="text/javascript"></script>