CODEWITHSUNDEEP
json
Prabhu R
Prabhu R

Reputation: 14242

JSON security issues?

Are there any security issues in using JSON for just data transfer, other than that it is plain text? Like, the eval() which poses a security issue when used in JavaScript. Are there any such issues, when JSON is just used to transfer data between computers and read by programs written in Java etc

Upvotes: 2

Views: 2762

Answers (3)

MSalters
MSalters

Reputation: 180245

Certainly. Sending out passwords unencrypted using JSON would be clearly a security issue. In general, JSON itself are just bytes; it's the interpretation that's given to them which may cause harm.

Upvotes: 0

joe
joe

Reputation: 35107

http://www.xml.com/cs/user/view/cs_msg/3370

http://directwebremoting.org/blog/joe/2007/03/05/json_is_not_as_safe_as_people_think_it_is.html

Upvotes: 4

rahul
rahul

Reputation: 187110

JSON can be used to execute JavaScript insertion attacks against any web client that uses it, unless the server (and only the server) takes appropriate precautions.

Upvotes: 1

Related Questions