News for hackers. Stuff that matters.

A comment on Parsing JSON Is a Minefield (2016). Parent comment

Re:Parsing JSON Is a Minefield (2016) by josefx on Tuesday October 12, 2021 @04:52AM (#28837527)
There was a time when every browser hack made headlines, now it has to involve something big like specter to get even noticed. Browsers and browser based applications still feature heavily at Pwn2Own style competitions, but YOLO lets add more pointless features with bug ridden APIs with every browser update.
[ Parent | on HN ]
Re:Parsing JSON Is a Minefield (2016) by HWR_14 on Tuesday October 12, 2021 @10:50AM (#28840444)
This is true and I remember when they were big headlines. I guess since I'm not in browser development, I'm used to the idea of contacting a known good server from my code, but my known good server being accessible from anyone on the internet.

Both are important, it's just interesting to see it written only from the other point of view.

[ Parent | on HN ]
Re:Parsing JSON Is a Minefield (2016) by tannhaeuser on Tuesday October 12, 2021 @12:47PM (#28841909)
Not wanting to disturb your browser sec discussion, but tbh I don't know what that has to with my GP post. If anything, SGML/XML allows hard validation of document data like basically no other mainstream tech.
[ Parent | on HN ]