I think this should be safe: https://github.com/phoe/safe-read https://github.com/phoe/safe-read This doesn’t provide such functionality out of the box, but i

I think this should be safe: https://github.com/phoe/safe-read https://github.com/phoe/safe-read This doesn’t provide such functionality out of the box, but it makes it pretty trivial to produce a custom READ that only has the features you want: https://github.com/s-expressionists/Eclector https://github.com/s-expressionists/Eclector It’s not exactly the right input format, and has a couple outstanding performance issues, but I wrote a parser for EDN which should be safe against code injection: https://github.com/fiddlerwoaroof/cl-edn https://github.com/fiddlerwoaroof/cl-edn