Flask protects against this for you automatically if you use the built in JSON encoder. This was probably more of a concern in 2007. I'm surprised that such a

Flask protects against this for you automatically if you use the built in JSON encoder. This was probably more of a concern in 2007. I'm surprised that such an old (and largely irrelevant now) article made the front page.