4 ms·
Given the ubiquity of JSON on the web, can anyone here think of any other common JSON parsers for modern web languages that behave in these unexpected ways?
by perpetualcrayon 9y ago
Given the ubiquity of JSON on the web, can anyone here think of any other common JSON parsers for modern web languages that behave in these unexpected ways?
- deleted 9y ago[deleted]
- mike_hearn 9y agoThey are all in disagreement over various edge cases. JSON is just a very weakly specified thing: http://seriot.ch/parsing_json.php http://seriot.ch/parsing_json.php It's not just JSON by the way. URL parsers also differ in how they handle malformed inputs, with potentially catastrophic results: https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-Ne... Basically the entire web stack is made up of protocols that are weakly specified, open to interpretation, lacking reference implementations and are therefore very hack prone.