8 ms·
On an unrelated note. If human readability isn't a primary concern, I'd recommend requiring that < > & all be escaped, this prevents some crappy attacks Also,
by pacaro 10y ago
On an unrelated note. If human readability isn't a primary concern, I'd recommend requiring that < > & all be escaped, this prevents some crappy attacks
Also, no top level lists!
- seagreen 10y agoWhy no top level lists?
- pacaro 10y agoHa! I guess I'm showing my age. There used to be an associated vulnerability, which is why some frameworks won't let you do it. It appears that the vulnerability was fixed in what are now fairly old versions of browsers. More info at http://stackoverflow.com/questions/16289894/is-json-hijacking-still-an-issue-in-modern-browsers http://stackoverflow.com/questions/16289894/is-json-hijackin...