News for hackers. Stuff that matters.

A comment on Oj – Optimized JSON in Ruby. Parent comment

Re:Oj – Optimized JSON in Ruby by noway421 on Tuesday April 25, 2017 @12:14AM (#14190723)
Indeed

>Taking an arbitrary String from a user and evaluating it is never a good idea from an unsecure source

In that case, how it is possible to implement JSON post on that for example?

[ Parent | on HN ]
Re:Oj – Optimized JSON in Ruby by mbell on Tuesday April 25, 2017 @12:52AM (#14190865)
The warnings, other than symbol GC in MRI <= 2.1, refer to using Oj in `object` mode: marshallings arbitrary Ruby object graphs to/from JSON. This is similar to pickle in python. This mode isn't what you would be using at the boundary of something like a http/json api.
[ Parent | on HN ]