Hjson, the Human JSON

Re:Hjson, the Human JSON by crdoconnor on Thursday April 14, 2016 @05:56PM (#11500639)

You don't need most of those features. A pared down YAML with the cruft removed (implicit typing, flow style, tag tokens, node anchor & references) is actually pretty simple as well as less "gotcha-y".

[ Parent | on HN ]

Re:Hjson, the Human JSON by __david__ on Friday April 15, 2016 @03:57AM (#11502853)

Sure, but most language YAML parsers support all or most of the spec. That can be a problem if you aren't expecting it.

[ Parent | on HN ]

Re:Hjson, the Human JSON by alanh on Friday April 15, 2016 @07:11PM (#11508311)

I believe it has even created security issues. Didn’t Rails have at least one YAML-based vuln?

[ Parent | on HN ]

Re:Hjson, the Human JSON by rurban on Sunday April 17, 2016 @12:19PM (#11515039)

You need to restrict YAML to SecureLoad, with manually adding allowed typed and classes.

At least perl doesn't support this, so it's inherently insecure there, but you can always use YAML::Syck which didn't go this way.

[ Parent | on HN ]