… | |
… | |
101 | |
101 | |
102 | package JSON::XS; |
102 | package JSON::XS; |
103 | |
103 | |
104 | use common::sense; |
104 | use common::sense; |
105 | |
105 | |
106 | our $VERSION = '2.25'; |
106 | our $VERSION = '2.28'; |
107 | our @ISA = qw(Exporter); |
107 | our @ISA = qw(Exporter); |
108 | |
108 | |
109 | our @EXPORT = qw(encode_json decode_json to_json from_json); |
109 | our @EXPORT = qw(encode_json decode_json to_json from_json); |
110 | |
110 | |
111 | sub to_json($) { |
111 | sub to_json($) { |
… | |
… | |
1324 | a very short single-line JSON string (also available at |
1324 | a very short single-line JSON string (also available at |
1325 | L<http://dist.schmorp.de/misc/json/short.json>). |
1325 | L<http://dist.schmorp.de/misc/json/short.json>). |
1326 | |
1326 | |
1327 | {"method": "handleMessage", "params": ["user1", |
1327 | {"method": "handleMessage", "params": ["user1", |
1328 | "we were just talking"], "id": null, "array":[1,11,234,-5,1e5,1e7, |
1328 | "we were just talking"], "id": null, "array":[1,11,234,-5,1e5,1e7, |
1329 | true, false]} |
1329 | 1, 0]} |
1330 | |
1330 | |
1331 | It shows the number of encodes/decodes per second (JSON::XS uses |
1331 | It shows the number of encodes/decodes per second (JSON::XS uses |
1332 | the functional interface, while JSON::XS/2 uses the OO interface |
1332 | the functional interface, while JSON::XS/2 uses the OO interface |
1333 | with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables |
1333 | with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables |
1334 | shrink). Higher is better: |
1334 | shrink. JSON::DWIW/DS uses the deserialise function, while JSON::DWIW::FJ |
|
|
1335 | uses the from_json method). Higher is better: |
1335 | |
1336 | |
1336 | module | encode | decode | |
1337 | module | encode | decode | |
1337 | -----------|------------|------------| |
1338 | --------------|------------|------------| |
1338 | JSON 1.x | 4990.842 | 4088.813 | |
1339 | JSON::DWIW/DS | 86302.551 | 102300.098 | |
1339 | JSON::DWIW | 51653.990 | 71575.154 | |
1340 | JSON::DWIW/FJ | 86302.551 | 75983.768 | |
1340 | JSON::PC | 65948.176 | 74631.744 | |
1341 | JSON::PP | 15827.562 | 6638.658 | |
1341 | JSON::PP | 8931.652 | 3817.168 | |
1342 | JSON::Syck | 63358.066 | 47662.545 | |
1342 | JSON::Syck | 24877.248 | 27776.848 | |
1343 | JSON::XS | 511500.488 | 511500.488 | |
1343 | JSON::XS | 388361.481 | 227951.304 | |
1344 | JSON::XS/2 | 291271.111 | 388361.481 | |
1344 | JSON::XS/2 | 227951.304 | 218453.333 | |
1345 | JSON::XS/3 | 361577.931 | 361577.931 | |
1345 | JSON::XS/3 | 338250.323 | 218453.333 | |
1346 | Storable | 66788.280 | 265462.278 | |
1346 | Storable | 16500.016 | 135300.129 | |
|
|
1347 | -----------+------------+------------+ |
1347 | --------------+------------+------------+ |
1348 | |
1348 | |
1349 | That is, JSON::XS is about five times faster than JSON::DWIW on encoding, |
1349 | That is, JSON::XS is almost six times faster than JSON::DWIW on encoding, |
1350 | about three times faster on decoding, and over forty times faster |
1350 | about five times faster on decoding, and over thirty to seventy times |
1351 | than JSON, even with pretty-printing and key sorting. It also compares |
1351 | faster than JSON's pure perl implementation. It also compares favourably |
1352 | favourably to Storable for small amounts of data. |
1352 | to Storable for small amounts of data. |
1353 | |
1353 | |
1354 | Using a longer test string (roughly 18KB, generated from Yahoo! Locals |
1354 | Using a longer test string (roughly 18KB, generated from Yahoo! Locals |
1355 | search API (L<http://dist.schmorp.de/misc/json/long.json>). |
1355 | search API (L<http://dist.schmorp.de/misc/json/long.json>). |
1356 | |
1356 | |
1357 | module | encode | decode | |
1357 | module | encode | decode | |
1358 | -----------|------------|------------| |
1358 | --------------|------------|------------| |
1359 | JSON 1.x | 55.260 | 34.971 | |
1359 | JSON::DWIW/DS | 1647.927 | 2673.916 | |
1360 | JSON::DWIW | 825.228 | 1082.513 | |
1360 | JSON::DWIW/FJ | 1630.249 | 2596.128 | |
1361 | JSON::PC | 3571.444 | 2394.829 | |
|
|
1362 | JSON::PP | 210.987 | 32.574 | |
1361 | JSON::PP | 400.640 | 62.311 | |
1363 | JSON::Syck | 552.551 | 787.544 | |
1362 | JSON::Syck | 1481.040 | 1524.869 | |
1364 | JSON::XS | 5780.463 | 4854.519 | |
1363 | JSON::XS | 20661.596 | 9541.183 | |
1365 | JSON::XS/2 | 3869.998 | 4798.975 | |
1364 | JSON::XS/2 | 10683.403 | 9416.938 | |
1366 | JSON::XS/3 | 5862.880 | 4798.975 | |
1365 | JSON::XS/3 | 20661.596 | 9400.054 | |
1367 | Storable | 4445.002 | 5235.027 | |
1366 | Storable | 19765.806 | 10000.725 | |
1368 | -----------+------------+------------+ |
1367 | --------------+------------+------------+ |
1369 | |
1368 | |
1370 | Again, JSON::XS leads by far (except for Storable which non-surprisingly |
1369 | Again, JSON::XS leads by far (except for Storable which non-surprisingly |
1371 | decodes faster). |
1370 | decodes a bit faster). |
1372 | |
1371 | |
1373 | On large strings containing lots of high Unicode characters, some modules |
1372 | On large strings containing lots of high Unicode characters, some modules |
1374 | (such as JSON::PC) seem to decode faster than JSON::XS, but the result |
1373 | (such as JSON::PC) seem to decode faster than JSON::XS, but the result |
1375 | will be broken due to missing (or wrong) Unicode handling. Others refuse |
1374 | will be broken due to missing (or wrong) Unicode handling. Others refuse |
1376 | to decode or encode properly, so it was impossible to prepare a fair |
1375 | to decode or encode properly, so it was impossible to prepare a fair |
… | |
… | |
1412 | information you might want to make sure that exceptions thrown by JSON::XS |
1411 | information you might want to make sure that exceptions thrown by JSON::XS |
1413 | will not end up in front of untrusted eyes. |
1412 | will not end up in front of untrusted eyes. |
1414 | |
1413 | |
1415 | If you are using JSON::XS to return packets to consumption |
1414 | If you are using JSON::XS to return packets to consumption |
1416 | by JavaScript scripts in a browser you should have a look at |
1415 | by JavaScript scripts in a browser you should have a look at |
1417 | L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether |
1416 | L<http://blog.archive.jpsykes.com/47/practical-csrf-and-json-security/> to |
1418 | you are vulnerable to some common attack vectors (which really are browser |
1417 | see whether you are vulnerable to some common attack vectors (which really |
1419 | design bugs, but it is still you who will have to deal with it, as major |
1418 | are browser design bugs, but it is still you who will have to deal with |
1420 | browser developers care only for features, not about getting security |
1419 | it, as major browser developers care only for features, not about getting |
1421 | right). |
1420 | security right). |
1422 | |
1421 | |
1423 | |
1422 | |
1424 | =head1 THREADS |
1423 | =head1 THREADS |
1425 | |
1424 | |
1426 | This module is I<not> guaranteed to be thread safe and there are no |
1425 | This module is I<not> guaranteed to be thread safe and there are no |