search

cs481-ekh / s23-volt

MIT License
0 stars 0 forks source link

Research JSON file validation #18

Closed stocktonwoodworth closed 1 year ago

stocktonwoodworth commented 1 year ago

References user story #9

Research how to validate the contents of a JSON file prior to loading it's configs on the web application. Find out how to prevent JSON injection attacks.

stocktonwoodworth commented 1 year ago

Researched how to prevent JSON injections. Key findings: limit file size, check keys, and check file depth. I started testing different ways of implementing these checks. I haven't gotten anything to work yet.

{t:187}

stocktonwoodworth commented 1 year ago

Researched more ways to validate JSON file contents. Define a schema and set up the appropriate properties. If some of the properties or key values don't line up, that may be a sign that the JSON file a user is uploading either altered the file or didn't initially create the file from saving their configurations in the application.

{t:122