It's not about \[code\]eval()\[/code\]Let say I have #password input, and I send this data as a part of JSON object\[code\]var toSend = { text: 'hello', pass: $("#password").val()};\[/code\]Do I need to validate input?Would \[code\]", you: "are hacked"\[/code\] be interpreted on another side of communication as single string or empty string and another property?edit: Nothing would happen in browser environment, but if JSON would be sent over internet as plain text and parsed again?
Are there any injection vulnerabilities in JSON?
- Thread starter guineo
- Start date