/ 
App-Context-0.968
River stage one • 2 direct dependents • 2 total dependents
/ App::Serializer::Json
Security Advisories (1)
CVE-2012-6141 (2014-06-04)

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.

NAME

App::Serializer::Json - Interface for serialization and deserialization

SYNOPSIS

use App;

$context = App->context();
$serializer = $context->service("Serializer");  # or ...
$serializer = $context->serializer();
$data = {
    an => 'arbitrary',
    collection => [ 'of', 'data', ],
    of => {
        arbitrary => 'depth',
    },
};
$json = $serializer->serialize($data);
$data = $serializer->deserialize($json);
print $serializer->dump($data), "\n";

DESCRIPTION

A Serializer allows you to serialize a structure of data of arbitrary depth to a scalar and deserialize it back to the structure.

The Json serializer uses JSON data structure syntax as the serialized form of the data. It uses the JSON module from CPAN to perform the deserialization and serialization.