jQuery provides several utility functions for working with serialised data: $.parseJSON() (now largely superseded by native JSON.parse()), $.parseHTML() for safely converting strings to DOM nodes, $.parseXML() for XML documents, and $.param() for serialising objects to query strings.
$.parseHTML()
$.parseHTML(htmlString, context, keepScripts) converts an HTML string into an array of DOM nodes. By default it strips <script> tags to prevent XSS. Pass true as the third argument only when you have a trusted source and genuinely need to execute scripts.
$.param()
$.param(object) serialises a plain object or array of name/value pairs into a URL-encoded query string — the same format produced by a form's GET submission. It is particularly useful when you need to build URLs manually for AJAX or navigation.
$.parseHTML(str)— HTML string to DOM array (XSS-safe)$.parseXML(str)— XML string to XML document$.param(obj)— object to query stringJSON.parse(str)— preferred over deprecated$.parseJSON()