> JSON Injection → SQL Injection → Buffer Overflow → ROP = PWNED Looked at another way, there were multiple opportunities to get it right, and they got it wron

> JSON Injection → SQL Injection → Buffer Overflow → ROP = PWNED Looked at another way, there were multiple opportunities to get it right, and they got it wrong every time. What’s remarkable is that JSON is a tiny specification. Writing a correct JSON parser should be child’s play for a decent engineer using decent tools.