openresty / lua-cjson

Lua CJSON is a fast JSON encoding/parsing module for Lua
http://www.kyne.com.au/~mark/software/lua-cjson.php
MIT License
436 stars 119 forks source link

json injection impact #89

Open astrix91 opened 1 year ago

astrix91 commented 1 year ago

Hi,

When using the decode API, is JSON injection something to be concerned about as a security threat?

zhuizhuhaomeng commented 1 year ago

We need more details about the injection.

agentzh commented 1 year ago

@astrix91 using this library is the very reason to avoid the most common JSON injection threats.