3 ms·
what is a 'json threat'? What is the threat actor here? It seems like you do some depth / length checks on arrays and objects but it also 'validate's json someh
by zemnmez 7y ago
what is a 'json threat'? What is the threat actor here? It seems like you do some depth / length checks on arrays and objects but it also 'validate's json somehow? https://github.com/ankur-anand/gojtp/blob/master/jtp.go#L341 https://github.com/ankur-anand/gojtp/blob/master/jtp.go#L341
- ankuranand 7y agoJavaScript object notation(JSON) is vulnerable to content level attacks. Such attacks attempt to use huge json files to overwhelm the parser and eventually crash the service. JSON threat protection is terms that describe the way to minimize the risk from such attacks by defining few limits on the json structure. Yes It also validates the json.
- zemnmez 7y agoif the idea is "limit the size of JSON" you already have http.MaxBytesReader or io.LimitReader