Re:Denial of Service and Unsafe Object Creation Vulnerabilit...
by mikeash on Monday February 11, 2013 @06:35PM
(#5204160)
Better yet would be to remove the trusted functionality entirely and give a good talking-to to whoever wrote it. A generic JSON parser shouldn't have an unsafe parsing method on it period. If you want to implement clever nonsense like this, do it at the next layer up and call it something else.
[ Parent
| on HN ]
There are no comments on this comment yet.