Security Advisories (2)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

NAME

Jifty::JSON -- Wrapper around JSON

DESCRIPTION

Provides a wrapper around the JSON library.

The JSON specification at http://www.json.org/ states that only double-quotes are possible for specifying strings. However, for the purposes of embedding Javascript-compatible objects in XHTML attributes (which use double-quotes), we sometimes want to provide strings in single quotes. This provides a version of "objToJson" in JSON which allows single-quoted string output.

If the faster JSON::Syck is available, it is preferred over the pure-perl JSON, as it provides native support for single-quoted strings.

METHODS

jsonToObj JSON, [ARGUMENTS]

For completeness, Jifty::JSON provides a jsonToObj. It is identical to "jsonToObj" in JSON.

objToJson OBJECT, [ARGUMENTS]

This method is identical to "objToJson" in JSON, except it has an additional possible option. The singlequote option, if set to a true value in the ARGUMENTS hashref, overrides JSON::Converter's string output method to output single quotes as delimters instead of double quotes.