Introduction to JavaScript Object Notation by Lindsay Bassett

Author:Lindsay Bassett
Language: eng
Format: epub, mobi
Publisher: O'Reilly Media, Inc.
Published: 2015-07-23T04:00:00+00:00

We also discussed these key concepts:

JSON by itself is not a threat. It is just text.

Three things to remember that will address security concerns with JSON: Do not use top-level arrays. Top-level arrays are valid JavaScript that can be linked to in a <script> tag and used.

Use HTTP POST instead of GET for JSON that is not intended for the public. The HTTP GET request can be linked to in a URL and placed in a script tag.

Use JSON.parse() instead of eval(). The eval() function will compile and execute the string that is passed in, which opens your code up for attacks. JSON.parse() only parses JSON.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.