News for hackers. Stuff that matters.
Re:JSON Feed by philsnow on Wednesday May 17, 2017 @03:44PM (#14362147)
modern browsers don't internally call eval(). See e.g. the definition of JSON.parse in v8: https://chromium.googlesource.com/v8/v8/+/4.3.65/src/json.js...
Re:JSON Feed by vsl on Friday May 19, 2017 @08:37AM (#14374987)
And modern XML parsers aren't full of vulnerabilities anymore. You're missing the point.