/ 
Jifty-0.60321
River stage two • 33 direct dependents • 33 total dependents
/ Jifty::JSON
Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::JSON -- Wrapper around JSON

DESCRIPTION

Provides a wrapper around the JSON library.

The JSON specification at http://www.crockford.com/JSON/ states that only double-quotes are possible for specifying strings. However, for the purposes of embedding Javascript-compatible objects in XHTML attributes (which use double-quotes), we sometimes want to provide strings in single quotes. This provides a version of "objToJson" in JSON which allows single-quoted string output.

If the faster JSON::Syck is available, it is preferred over the pure-perl JSON, as it provides native support for single-quoted strings..

METHODS

jsonToObj JSON, [ARGUMENTS]

For completeness, Jifty::JSON provides a jsonToObj. It is identical to "jsonToObj" in JSON.

objToJson OBJECT, [ARGUMENTS]

This method is identical to "objToJson" in JSON, except it has an additional possible option. The singlequote option, if set to a true value in the ARGUMENTS hashref, overrides JSON::Converter's string output method to output single quotes as delimters instead of double quotes.