ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/JSON-XS/XS.pm
(Generate patch)

Comparing JSON-XS/XS.pm (file contents):
Revision 1.77 by root, Tue Dec 4 10:37:42 2007 UTC vs.
Revision 1.121 by root, Mon Jul 13 22:13:17 2009 UTC

1=head1 NAME 1=head1 NAME
2 2
3JSON::XS - JSON serialising/deserialising, done correctly and fast 3JSON::XS - JSON serialising/deserialising, done correctly and fast
4
5=encoding utf-8
4 6
5JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ 7JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ
6 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html) 8 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html)
7 9
8=head1 SYNOPSIS 10=head1 SYNOPSIS
10 use JSON::XS; 12 use JSON::XS;
11 13
12 # exported functions, they croak on error 14 # exported functions, they croak on error
13 # and expect/generate UTF-8 15 # and expect/generate UTF-8
14 16
15 $utf8_encoded_json_text = to_json $perl_hash_or_arrayref; 17 $utf8_encoded_json_text = encode_json $perl_hash_or_arrayref;
16 $perl_hash_or_arrayref = from_json $utf8_encoded_json_text; 18 $perl_hash_or_arrayref = decode_json $utf8_encoded_json_text;
17 19
18 # OO-interface 20 # OO-interface
19 21
20 $coder = JSON::XS->new->ascii->pretty->allow_nonref; 22 $coder = JSON::XS->new->ascii->pretty->allow_nonref;
21 $pretty_printed_unencoded = $coder->encode ($perl_scalar); 23 $pretty_printed_unencoded = $coder->encode ($perl_scalar);
35primary goal is to be I<correct> and its secondary goal is to be 37primary goal is to be I<correct> and its secondary goal is to be
36I<fast>. To reach the latter goal it was written in C. 38I<fast>. To reach the latter goal it was written in C.
37 39
38Beginning with version 2.0 of the JSON module, when both JSON and 40Beginning with version 2.0 of the JSON module, when both JSON and
39JSON::XS are installed, then JSON will fall back on JSON::XS (this can be 41JSON::XS are installed, then JSON will fall back on JSON::XS (this can be
40overriden) with no overhead due to emulation (by inheritign constructor 42overridden) with no overhead due to emulation (by inheriting constructor
41and methods). If JSON::XS is not available, it will fall back to the 43and methods). If JSON::XS is not available, it will fall back to the
42compatible JSON::PP module as backend, so using JSON instead of JSON::XS 44compatible JSON::PP module as backend, so using JSON instead of JSON::XS
43gives you a portable JSON API that can be fast when you need and doesn't 45gives you a portable JSON API that can be fast when you need and doesn't
44require a C compiler when that is a problem. 46require a C compiler when that is a problem.
45 47
47to write yet another JSON module? While it seems there are many JSON 49to write yet another JSON module? While it seems there are many JSON
48modules, none of them correctly handle all corner cases, and in most cases 50modules, none of them correctly handle all corner cases, and in most cases
49their maintainers are unresponsive, gone missing, or not listening to bug 51their maintainers are unresponsive, gone missing, or not listening to bug
50reports for other reasons. 52reports for other reasons.
51 53
52See COMPARISON, below, for a comparison to some other JSON modules.
53
54See MAPPING, below, on how JSON::XS maps perl values to JSON values and 54See MAPPING, below, on how JSON::XS maps perl values to JSON values and
55vice versa. 55vice versa.
56 56
57=head2 FEATURES 57=head2 FEATURES
58 58
59=over 4 59=over 4
60 60
61=item * correct Unicode handling 61=item * correct Unicode handling
62 62
63This module knows how to handle Unicode, and even documents how and when 63This module knows how to handle Unicode, documents how and when it does
64it does so. 64so, and even documents what "correct" means.
65 65
66=item * round-trip integrity 66=item * round-trip integrity
67 67
68When you serialise a perl data structure using only datatypes supported 68When you serialise a perl data structure using only data types supported
69by JSON, the deserialised data structure is identical on the Perl level. 69by JSON, the deserialised data structure is identical on the Perl level.
70(e.g. the string "2.0" doesn't suddenly become "2" just because it looks 70(e.g. the string "2.0" doesn't suddenly become "2" just because it looks
71like a number). 71like a number). There minor I<are> exceptions to this, read the MAPPING
72section below to learn about those.
72 73
73=item * strict checking of JSON correctness 74=item * strict checking of JSON correctness
74 75
75There is no guessing, no generating of illegal JSON texts by default, 76There is no guessing, no generating of illegal JSON texts by default,
76and only JSON is accepted as input by default (the latter is a security 77and only JSON is accepted as input by default (the latter is a security
77feature). 78feature).
78 79
79=item * fast 80=item * fast
80 81
81Compared to other JSON modules, this module compares favourably in terms 82Compared to other JSON modules and other serialisers such as Storable,
82of speed, too. 83this module usually compares favourably in terms of speed, too.
83 84
84=item * simple to use 85=item * simple to use
85 86
86This module has both a simple functional interface as well as an OO 87This module has both a simple functional interface as well as an object
87interface. 88oriented interface interface.
88 89
89=item * reasonably versatile output formats 90=item * reasonably versatile output formats
90 91
91You can choose between the most compact guaranteed single-line format 92You can choose between the most compact guaranteed-single-line format
92possible (nice for simple line-based protocols), a pure-ascii format 93possible (nice for simple line-based protocols), a pure-ASCII format
93(for when your transport is not 8-bit clean, still supports the whole 94(for when your transport is not 8-bit clean, still supports the whole
94Unicode range), or a pretty-printed format (for when you want to read that 95Unicode range), or a pretty-printed format (for when you want to read that
95stuff). Or you can combine those features in whatever way you like. 96stuff). Or you can combine those features in whatever way you like.
96 97
97=back 98=back
98 99
99=cut 100=cut
100 101
101package JSON::XS; 102package JSON::XS;
102 103
103use strict; 104use common::sense;
104 105
105our $VERSION = '2.0'; 106our $VERSION = '2.24';
106our @ISA = qw(Exporter); 107our @ISA = qw(Exporter);
107 108
108our @EXPORT = qw(to_json from_json); 109our @EXPORT = qw(encode_json decode_json to_json from_json);
110
111sub to_json($) {
112 require Carp;
113 Carp::croak ("JSON::XS::to_json has been renamed to encode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
114}
115
116sub from_json($) {
117 require Carp;
118 Carp::croak ("JSON::XS::from_json has been renamed to decode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
119}
109 120
110use Exporter; 121use Exporter;
111use XSLoader; 122use XSLoader;
112 123
113=head1 FUNCTIONAL INTERFACE 124=head1 FUNCTIONAL INTERFACE
115The following convenience methods are provided by this module. They are 126The following convenience methods are provided by this module. They are
116exported by default: 127exported by default:
117 128
118=over 4 129=over 4
119 130
120=item $json_text = to_json $perl_scalar 131=item $json_text = encode_json $perl_scalar
121 132
122Converts the given Perl data structure to a UTF-8 encoded, binary string 133Converts the given Perl data structure to a UTF-8 encoded, binary string
123(that is, the string contains octets only). Croaks on error. 134(that is, the string contains octets only). Croaks on error.
124 135
125This function call is functionally identical to: 136This function call is functionally identical to:
126 137
127 $json_text = JSON::XS->new->utf8->encode ($perl_scalar) 138 $json_text = JSON::XS->new->utf8->encode ($perl_scalar)
128 139
129except being faster. 140Except being faster.
130 141
131=item $perl_scalar = from_json $json_text 142=item $perl_scalar = decode_json $json_text
132 143
133The opposite of C<to_json>: expects an UTF-8 (binary) string and tries 144The opposite of C<encode_json>: expects an UTF-8 (binary) string and tries
134to parse that as an UTF-8 encoded JSON text, returning the resulting 145to parse that as an UTF-8 encoded JSON text, returning the resulting
135reference. Croaks on error. 146reference. Croaks on error.
136 147
137This function call is functionally identical to: 148This function call is functionally identical to:
138 149
139 $perl_scalar = JSON::XS->new->utf8->decode ($json_text) 150 $perl_scalar = JSON::XS->new->utf8->decode ($json_text)
140 151
141except being faster. 152Except being faster.
142 153
143=item $is_boolean = JSON::XS::is_bool $scalar 154=item $is_boolean = JSON::XS::is_bool $scalar
144 155
145Returns true if the passed scalar represents either JSON::XS::true or 156Returns true if the passed scalar represents either JSON::XS::true or
146JSON::XS::false, two constants that act like C<1> and C<0>, respectively 157JSON::XS::false, two constants that act like C<1> and C<0>, respectively
164This enables you to store Unicode characters as single characters in a 175This enables you to store Unicode characters as single characters in a
165Perl string - very natural. 176Perl string - very natural.
166 177
167=item 2. Perl does I<not> associate an encoding with your strings. 178=item 2. Perl does I<not> associate an encoding with your strings.
168 179
169Unless you force it to, e.g. when matching it against a regex, or printing 180... until you force it to, e.g. when matching it against a regex, or
170the scalar to a file, in which case Perl either interprets your string as 181printing the scalar to a file, in which case Perl either interprets your
171locale-encoded text, octets/binary, or as Unicode, depending on various 182string as locale-encoded text, octets/binary, or as Unicode, depending
172settings. In no case is an encoding stored together with your data, it is 183on various settings. In no case is an encoding stored together with your
173I<use> that decides encoding, not any magical metadata. 184data, it is I<use> that decides encoding, not any magical meta data.
174 185
175=item 3. The internal utf-8 flag has no meaning with regards to the 186=item 3. The internal utf-8 flag has no meaning with regards to the
176encoding of your string. 187encoding of your string.
177 188
178Just ignore that flag unless you debug a Perl bug, a module written in 189Just ignore that flag unless you debug a Perl bug, a module written in
184 195
185If you didn't know about that flag, just the better, pretend it doesn't 196If you didn't know about that flag, just the better, pretend it doesn't
186exist. 197exist.
187 198
188=item 4. A "Unicode String" is simply a string where each character can be 199=item 4. A "Unicode String" is simply a string where each character can be
189validly interpreted as a Unicode codepoint. 200validly interpreted as a Unicode code point.
190 201
191If you have UTF-8 encoded data, it is no longer a Unicode string, but a 202If you have UTF-8 encoded data, it is no longer a Unicode string, but a
192Unicode string encoded in UTF-8, giving you a binary string. 203Unicode string encoded in UTF-8, giving you a binary string.
193 204
194=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string. 205=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string.
232 243
233If C<$enable> is false, then the C<encode> method will not escape Unicode 244If C<$enable> is false, then the C<encode> method will not escape Unicode
234characters unless required by the JSON syntax or other flags. This results 245characters unless required by the JSON syntax or other flags. This results
235in a faster and more compact format. 246in a faster and more compact format.
236 247
248See also the section I<ENCODING/CODESET FLAG NOTES> later in this
249document.
250
237The main use for this flag is to produce JSON texts that can be 251The main use for this flag is to produce JSON texts that can be
238transmitted over a 7-bit channel, as the encoded JSON texts will not 252transmitted over a 7-bit channel, as the encoded JSON texts will not
239contain any 8 bit characters. 253contain any 8 bit characters.
240 254
241 JSON::XS->new->ascii (1)->encode ([chr 0x10401]) 255 JSON::XS->new->ascii (1)->encode ([chr 0x10401])
252will not be affected in any way by this flag, as C<decode> by default 266will not be affected in any way by this flag, as C<decode> by default
253expects Unicode, which is a strict superset of latin1. 267expects Unicode, which is a strict superset of latin1.
254 268
255If C<$enable> is false, then the C<encode> method will not escape Unicode 269If C<$enable> is false, then the C<encode> method will not escape Unicode
256characters unless required by the JSON syntax or other flags. 270characters unless required by the JSON syntax or other flags.
271
272See also the section I<ENCODING/CODESET FLAG NOTES> later in this
273document.
257 274
258The main use for this flag is efficiently encoding binary data as JSON 275The main use for this flag is efficiently encoding binary data as JSON
259text, as most octets will not be escaped, resulting in a smaller encoded 276text, as most octets will not be escaped, resulting in a smaller encoded
260size. The disadvantage is that the resulting JSON text is encoded 277size. The disadvantage is that the resulting JSON text is encoded
261in latin1 (and must correctly be treated as such when storing and 278in latin1 (and must correctly be treated as such when storing and
280 297
281If C<$enable> is false, then the C<encode> method will return the JSON 298If C<$enable> is false, then the C<encode> method will return the JSON
282string as a (non-encoded) Unicode string, while C<decode> expects thus a 299string as a (non-encoded) Unicode string, while C<decode> expects thus a
283Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs 300Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs
284to be done yourself, e.g. using the Encode module. 301to be done yourself, e.g. using the Encode module.
302
303See also the section I<ENCODING/CODESET FLAG NOTES> later in this
304document.
285 305
286Example, output UTF-16BE-encoded JSON: 306Example, output UTF-16BE-encoded JSON:
287 307
288 use Encode; 308 use Encode;
289 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object); 309 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object);
441resulting in an invalid JSON text: 461resulting in an invalid JSON text:
442 462
443 JSON::XS->new->allow_nonref->encode ("Hello, World!") 463 JSON::XS->new->allow_nonref->encode ("Hello, World!")
444 => "Hello, World!" 464 => "Hello, World!"
445 465
466=item $json = $json->allow_unknown ([$enable])
467
468=item $enabled = $json->get_allow_unknown
469
470If C<$enable> is true (or missing), then C<encode> will I<not> throw an
471exception when it encounters values it cannot represent in JSON (for
472example, filehandles) but instead will encode a JSON C<null> value. Note
473that blessed objects are not included here and are handled separately by
474c<allow_nonref>.
475
476If C<$enable> is false (the default), then C<encode> will throw an
477exception when it encounters anything it cannot encode as JSON.
478
479This option does not affect C<decode> in any way, and it is recommended to
480leave it off unless you know your communications partner.
481
446=item $json = $json->allow_blessed ([$enable]) 482=item $json = $json->allow_blessed ([$enable])
447 483
448=item $enabled = $json->get_allow_blessed 484=item $enabled = $json->get_allow_blessed
449 485
450If C<$enable> is true (or missing), then the C<encode> method will not 486If C<$enable> is true (or missing), then the C<encode> method will not
471The C<TO_JSON> method may safely call die if it wants. If C<TO_JSON> 507The C<TO_JSON> method may safely call die if it wants. If C<TO_JSON>
472returns other blessed objects, those will be handled in the same 508returns other blessed objects, those will be handled in the same
473way. C<TO_JSON> must take care of not causing an endless recursion cycle 509way. C<TO_JSON> must take care of not causing an endless recursion cycle
474(== crash) in this case. The name of C<TO_JSON> was chosen because other 510(== crash) in this case. The name of C<TO_JSON> was chosen because other
475methods called by the Perl core (== not by the user of the object) are 511methods called by the Perl core (== not by the user of the object) are
476usually in upper case letters and to avoid collisions with the C<to_json> 512usually in upper case letters and to avoid collisions with any C<to_json>
477function. 513function or method.
478 514
479This setting does not yet influence C<decode> in any way, but in the 515This setting does not yet influence C<decode> in any way, but in the
480future, global hooks might get installed that influence C<decode> and are 516future, global hooks might get installed that influence C<decode> and are
481enabled by this setting. 517enabled by this setting.
482 518
590=item $json = $json->max_depth ([$maximum_nesting_depth]) 626=item $json = $json->max_depth ([$maximum_nesting_depth])
591 627
592=item $max_depth = $json->get_max_depth 628=item $max_depth = $json->get_max_depth
593 629
594Sets the maximum nesting level (default C<512>) accepted while encoding 630Sets the maximum nesting level (default C<512>) accepted while encoding
595or decoding. If the JSON text or Perl data structure has an equal or 631or decoding. If a higher nesting level is detected in JSON text or a Perl
596higher nesting level then this limit, then the encoder and decoder will 632data structure, then the encoder and decoder will stop and croak at that
597stop and croak at that point. 633point.
598 634
599Nesting level is defined by number of hash- or arrayrefs that the encoder 635Nesting level is defined by number of hash- or arrayrefs that the encoder
600needs to traverse to reach a given point or the number of C<{> or C<[> 636needs to traverse to reach a given point or the number of C<{> or C<[>
601characters without their matching closing parenthesis crossed to reach a 637characters without their matching closing parenthesis crossed to reach a
602given character in a string. 638given character in a string.
603 639
604Setting the maximum depth to one disallows any nesting, so that ensures 640Setting the maximum depth to one disallows any nesting, so that ensures
605that the object is only a single hash/object or array. 641that the object is only a single hash/object or array.
606 642
607The argument to C<max_depth> will be rounded up to the next highest power
608of two. If no argument is given, the highest possible setting will be 643If no argument is given, the highest possible setting will be used, which
609used, which is rarely useful. 644is rarely useful.
645
646Note that nesting is implemented by recursion in C. The default value has
647been chosen to be as large as typical operating systems allow without
648crashing.
610 649
611See SECURITY CONSIDERATIONS, below, for more info on why this is useful. 650See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
612 651
613=item $json = $json->max_size ([$maximum_string_size]) 652=item $json = $json->max_size ([$maximum_string_size])
614 653
615=item $max_size = $json->get_max_size 654=item $max_size = $json->get_max_size
616 655
617Set the maximum length a JSON text may have (in bytes) where decoding is 656Set the maximum length a JSON text may have (in bytes) where decoding is
618being attempted. The default is C<0>, meaning no limit. When C<decode> 657being attempted. The default is C<0>, meaning no limit. When C<decode>
619is called on a string longer then this number of characters it will not 658is called on a string that is longer then this many bytes, it will not
620attempt to decode the string but throw an exception. This setting has no 659attempt to decode the string but throw an exception. This setting has no
621effect on C<encode> (yet). 660effect on C<encode> (yet).
622 661
623The argument to C<max_size> will be rounded up to the next B<highest> 662If no argument is given, the limit check will be deactivated (same as when
624power of two (so may be more than requested). If no argument is given, the 663C<0> is specified).
625limit check will be deactivated (same as when C<0> is specified).
626 664
627See SECURITY CONSIDERATIONS, below, for more info on why this is useful. 665See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
628 666
629=item $json_text = $json->encode ($perl_scalar) 667=item $json_text = $json->encode ($perl_scalar)
630 668
659 => ([], 3) 697 => ([], 3)
660 698
661=back 699=back
662 700
663 701
702=head1 INCREMENTAL PARSING
703
704In some cases, there is the need for incremental parsing of JSON
705texts. While this module always has to keep both JSON text and resulting
706Perl data structure in memory at one time, it does allow you to parse a
707JSON stream incrementally. It does so by accumulating text until it has
708a full JSON object, which it then can decode. This process is similar to
709using C<decode_prefix> to see if a full JSON object is available, but
710is much more efficient (and can be implemented with a minimum of method
711calls).
712
713JSON::XS will only attempt to parse the JSON text once it is sure it
714has enough text to get a decisive result, using a very simple but
715truly incremental parser. This means that it sometimes won't stop as
716early as the full parser, for example, it doesn't detect parenthese
717mismatches. The only thing it guarantees is that it starts decoding as
718soon as a syntactically valid JSON text has been seen. This means you need
719to set resource limits (e.g. C<max_size>) to ensure the parser will stop
720parsing in the presence if syntax errors.
721
722The following methods implement this incremental parser.
723
724=over 4
725
726=item [void, scalar or list context] = $json->incr_parse ([$string])
727
728This is the central parsing function. It can both append new text and
729extract objects from the stream accumulated so far (both of these
730functions are optional).
731
732If C<$string> is given, then this string is appended to the already
733existing JSON fragment stored in the C<$json> object.
734
735After that, if the function is called in void context, it will simply
736return without doing anything further. This can be used to add more text
737in as many chunks as you want.
738
739If the method is called in scalar context, then it will try to extract
740exactly I<one> JSON object. If that is successful, it will return this
741object, otherwise it will return C<undef>. If there is a parse error,
742this method will croak just as C<decode> would do (one can then use
743C<incr_skip> to skip the errornous part). This is the most common way of
744using the method.
745
746And finally, in list context, it will try to extract as many objects
747from the stream as it can find and return them, or the empty list
748otherwise. For this to work, there must be no separators between the JSON
749objects or arrays, instead they must be concatenated back-to-back. If
750an error occurs, an exception will be raised as in the scalar context
751case. Note that in this case, any previously-parsed JSON texts will be
752lost.
753
754=item $lvalue_string = $json->incr_text
755
756This method returns the currently stored JSON fragment as an lvalue, that
757is, you can manipulate it. This I<only> works when a preceding call to
758C<incr_parse> in I<scalar context> successfully returned an object. Under
759all other circumstances you must not call this function (I mean it.
760although in simple tests it might actually work, it I<will> fail under
761real world conditions). As a special exception, you can also call this
762method before having parsed anything.
763
764This function is useful in two cases: a) finding the trailing text after a
765JSON object or b) parsing multiple JSON objects separated by non-JSON text
766(such as commas).
767
768=item $json->incr_skip
769
770This will reset the state of the incremental parser and will remove
771the parsed text from the input buffer so far. This is useful after
772C<incr_parse> died, in which case the input buffer and incremental parser
773state is left unchanged, to skip the text parsed so far and to reset the
774parse state.
775
776The difference to C<incr_reset> is that only text until the parse error
777occured is removed.
778
779=item $json->incr_reset
780
781This completely resets the incremental parser, that is, after this call,
782it will be as if the parser had never parsed anything.
783
784This is useful if you want to repeatedly parse JSON objects and want to
785ignore any trailing data, which means you have to reset the parser after
786each successful decode.
787
788=back
789
790=head2 LIMITATIONS
791
792All options that affect decoding are supported, except
793C<allow_nonref>. The reason for this is that it cannot be made to
794work sensibly: JSON objects and arrays are self-delimited, i.e. you can concatenate
795them back to back and still decode them perfectly. This does not hold true
796for JSON numbers, however.
797
798For example, is the string C<1> a single JSON number, or is it simply the
799start of C<12>? Or is C<12> a single JSON number, or the concatenation
800of C<1> and C<2>? In neither case you can tell, and this is why JSON::XS
801takes the conservative route and disallows this case.
802
803=head2 EXAMPLES
804
805Some examples will make all this clearer. First, a simple example that
806works similarly to C<decode_prefix>: We want to decode the JSON object at
807the start of a string and identify the portion after the JSON object:
808
809 my $text = "[1,2,3] hello";
810
811 my $json = new JSON::XS;
812
813 my $obj = $json->incr_parse ($text)
814 or die "expected JSON object or array at beginning of string";
815
816 my $tail = $json->incr_text;
817 # $tail now contains " hello"
818
819Easy, isn't it?
820
821Now for a more complicated example: Imagine a hypothetical protocol where
822you read some requests from a TCP stream, and each request is a JSON
823array, without any separation between them (in fact, it is often useful to
824use newlines as "separators", as these get interpreted as whitespace at
825the start of the JSON text, which makes it possible to test said protocol
826with C<telnet>...).
827
828Here is how you'd do it (it is trivial to write this in an event-based
829manner):
830
831 my $json = new JSON::XS;
832
833 # read some data from the socket
834 while (sysread $socket, my $buf, 4096) {
835
836 # split and decode as many requests as possible
837 for my $request ($json->incr_parse ($buf)) {
838 # act on the $request
839 }
840 }
841
842Another complicated example: Assume you have a string with JSON objects
843or arrays, all separated by (optional) comma characters (e.g. C<[1],[2],
844[3]>). To parse them, we have to skip the commas between the JSON texts,
845and here is where the lvalue-ness of C<incr_text> comes in useful:
846
847 my $text = "[1],[2], [3]";
848 my $json = new JSON::XS;
849
850 # void context, so no parsing done
851 $json->incr_parse ($text);
852
853 # now extract as many objects as possible. note the
854 # use of scalar context so incr_text can be called.
855 while (my $obj = $json->incr_parse) {
856 # do something with $obj
857
858 # now skip the optional comma
859 $json->incr_text =~ s/^ \s* , //x;
860 }
861
862Now lets go for a very complex example: Assume that you have a gigantic
863JSON array-of-objects, many gigabytes in size, and you want to parse it,
864but you cannot load it into memory fully (this has actually happened in
865the real world :).
866
867Well, you lost, you have to implement your own JSON parser. But JSON::XS
868can still help you: You implement a (very simple) array parser and let
869JSON decode the array elements, which are all full JSON objects on their
870own (this wouldn't work if the array elements could be JSON numbers, for
871example):
872
873 my $json = new JSON::XS;
874
875 # open the monster
876 open my $fh, "<bigfile.json"
877 or die "bigfile: $!";
878
879 # first parse the initial "["
880 for (;;) {
881 sysread $fh, my $buf, 65536
882 or die "read error: $!";
883 $json->incr_parse ($buf); # void context, so no parsing
884
885 # Exit the loop once we found and removed(!) the initial "[".
886 # In essence, we are (ab-)using the $json object as a simple scalar
887 # we append data to.
888 last if $json->incr_text =~ s/^ \s* \[ //x;
889 }
890
891 # now we have the skipped the initial "[", so continue
892 # parsing all the elements.
893 for (;;) {
894 # in this loop we read data until we got a single JSON object
895 for (;;) {
896 if (my $obj = $json->incr_parse) {
897 # do something with $obj
898 last;
899 }
900
901 # add more data
902 sysread $fh, my $buf, 65536
903 or die "read error: $!";
904 $json->incr_parse ($buf); # void context, so no parsing
905 }
906
907 # in this loop we read data until we either found and parsed the
908 # separating "," between elements, or the final "]"
909 for (;;) {
910 # first skip whitespace
911 $json->incr_text =~ s/^\s*//;
912
913 # if we find "]", we are done
914 if ($json->incr_text =~ s/^\]//) {
915 print "finished.\n";
916 exit;
917 }
918
919 # if we find ",", we can continue with the next element
920 if ($json->incr_text =~ s/^,//) {
921 last;
922 }
923
924 # if we find anything else, we have a parse error!
925 if (length $json->incr_text) {
926 die "parse error near ", $json->incr_text;
927 }
928
929 # else add more data
930 sysread $fh, my $buf, 65536
931 or die "read error: $!";
932 $json->incr_parse ($buf); # void context, so no parsing
933 }
934
935This is a complex example, but most of the complexity comes from the fact
936that we are trying to be correct (bear with me if I am wrong, I never ran
937the above example :).
938
939
940
664=head1 MAPPING 941=head1 MAPPING
665 942
666This section describes how JSON::XS maps Perl values to JSON values and 943This section describes how JSON::XS maps Perl values to JSON values and
667vice versa. These mappings are designed to "do the right thing" in most 944vice versa. These mappings are designed to "do the right thing" in most
668circumstances automatically, preserving round-tripping characteristics 945circumstances automatically, preserving round-tripping characteristics
696 973
697A JSON number becomes either an integer, numeric (floating point) or 974A JSON number becomes either an integer, numeric (floating point) or
698string scalar in perl, depending on its range and any fractional parts. On 975string scalar in perl, depending on its range and any fractional parts. On
699the Perl level, there is no difference between those as Perl handles all 976the Perl level, there is no difference between those as Perl handles all
700the conversion details, but an integer may take slightly less memory and 977the conversion details, but an integer may take slightly less memory and
701might represent more values exactly than (floating point) numbers. 978might represent more values exactly than floating point numbers.
702 979
703If the number consists of digits only, JSON::XS will try to represent 980If the number consists of digits only, JSON::XS will try to represent
704it as an integer value. If that fails, it will try to represent it as 981it as an integer value. If that fails, it will try to represent it as
705a numeric (floating point) value if that is possible without loss of 982a numeric (floating point) value if that is possible without loss of
706precision. Otherwise it will preserve the number as a string value. 983precision. Otherwise it will preserve the number as a string value (in
984which case you lose roundtripping ability, as the JSON number will be
985re-encoded toa JSON string).
707 986
708Numbers containing a fractional or exponential part will always be 987Numbers containing a fractional or exponential part will always be
709represented as numeric (floating point) values, possibly at a loss of 988represented as numeric (floating point) values, possibly at a loss of
710precision. 989precision (in which case you might lose perfect roundtripping ability, but
711 990the JSON number will still be re-encoded as a JSON number).
712This might create round-tripping problems as numbers might become strings,
713but as Perl is typeless there is no other way to do it.
714 991
715=item true, false 992=item true, false
716 993
717These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>, 994These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>,
718respectively. They are overloaded to act almost exactly like the numbers 995respectively. They are overloaded to act almost exactly like the numbers
755Other unblessed references are generally not allowed and will cause an 1032Other unblessed references are generally not allowed and will cause an
756exception to be thrown, except for references to the integers C<0> and 1033exception to be thrown, except for references to the integers C<0> and
757C<1>, which get turned into C<false> and C<true> atoms in JSON. You can 1034C<1>, which get turned into C<false> and C<true> atoms in JSON. You can
758also use C<JSON::XS::false> and C<JSON::XS::true> to improve readability. 1035also use C<JSON::XS::false> and C<JSON::XS::true> to improve readability.
759 1036
760 to_json [\0,JSON::XS::true] # yields [false,true] 1037 encode_json [\0, JSON::XS::true] # yields [false,true]
761 1038
762=item JSON::XS::true, JSON::XS::false 1039=item JSON::XS::true, JSON::XS::false
763 1040
764These special values become JSON true and JSON false values, 1041These special values become JSON true and JSON false values,
765respectively. You can also use C<\1> and C<\0> directly if you want. 1042respectively. You can also use C<\1> and C<\0> directly if you want.
766 1043
767=item blessed objects 1044=item blessed objects
768 1045
769Blessed objects are not allowed. JSON::XS currently tries to encode their 1046Blessed objects are not directly representable in JSON. See the
770underlying representation (hash- or arrayref), but this behaviour might 1047C<allow_blessed> and C<convert_blessed> methods on various options on
771change in future versions. 1048how to deal with this: basically, you can choose between throwing an
1049exception, encoding the reference as if it weren't blessed, or provide
1050your own serialiser method.
772 1051
773=item simple scalars 1052=item simple scalars
774 1053
775Simple Perl scalars (any scalar that is not a reference) are the most 1054Simple Perl scalars (any scalar that is not a reference) are the most
776difficult objects to encode: JSON::XS will encode undefined scalars as 1055difficult objects to encode: JSON::XS will encode undefined scalars as
777JSON null value, scalars that have last been used in a string context 1056JSON C<null> values, scalars that have last been used in a string context
778before encoding as JSON strings and anything else as number value: 1057before encoding as JSON strings, and anything else as number value:
779 1058
780 # dump as number 1059 # dump as number
781 to_json [2] # yields [2] 1060 encode_json [2] # yields [2]
782 to_json [-3.0e17] # yields [-3e+17] 1061 encode_json [-3.0e17] # yields [-3e+17]
783 my $value = 5; to_json [$value] # yields [5] 1062 my $value = 5; encode_json [$value] # yields [5]
784 1063
785 # used as string, so dump as string 1064 # used as string, so dump as string
786 print $value; 1065 print $value;
787 to_json [$value] # yields ["5"] 1066 encode_json [$value] # yields ["5"]
788 1067
789 # undef becomes null 1068 # undef becomes null
790 to_json [undef] # yields [null] 1069 encode_json [undef] # yields [null]
791 1070
792You can force the type to be a JSON string by stringifying it: 1071You can force the type to be a JSON string by stringifying it:
793 1072
794 my $x = 3.1; # some variable containing a number 1073 my $x = 3.1; # some variable containing a number
795 "$x"; # stringified 1074 "$x"; # stringified
801 my $x = "3"; # some variable containing a string 1080 my $x = "3"; # some variable containing a string
802 $x += 0; # numify it, ensuring it will be dumped as a number 1081 $x += 0; # numify it, ensuring it will be dumped as a number
803 $x *= 1; # same thing, the choice is yours. 1082 $x *= 1; # same thing, the choice is yours.
804 1083
805You can not currently force the type in other, less obscure, ways. Tell me 1084You can not currently force the type in other, less obscure, ways. Tell me
806if you need this capability. 1085if you need this capability (but don't forget to explain why it's needed
1086:).
807 1087
808=back 1088=back
809 1089
810 1090
811=head1 COMPARISON 1091=head1 ENCODING/CODESET FLAG NOTES
812 1092
813As already mentioned, this module was created because none of the existing 1093The interested reader might have seen a number of flags that signify
814JSON modules could be made to work correctly. First I will describe the 1094encodings or codesets - C<utf8>, C<latin1> and C<ascii>. There seems to be
815problems (or pleasures) I encountered with various existing JSON modules, 1095some confusion on what these do, so here is a short comparison:
816followed by some benchmark values. JSON::XS was designed not to suffer 1096
817from any of these problems or limitations. 1097C<utf8> controls whether the JSON text created by C<encode> (and expected
1098by C<decode>) is UTF-8 encoded or not, while C<latin1> and C<ascii> only
1099control whether C<encode> escapes character values outside their respective
1100codeset range. Neither of these flags conflict with each other, although
1101some combinations make less sense than others.
1102
1103Care has been taken to make all flags symmetrical with respect to
1104C<encode> and C<decode>, that is, texts encoded with any combination of
1105these flag values will be correctly decoded when the same flags are used
1106- in general, if you use different flag settings while encoding vs. when
1107decoding you likely have a bug somewhere.
1108
1109Below comes a verbose discussion of these flags. Note that a "codeset" is
1110simply an abstract set of character-codepoint pairs, while an encoding
1111takes those codepoint numbers and I<encodes> them, in our case into
1112octets. Unicode is (among other things) a codeset, UTF-8 is an encoding,
1113and ISO-8859-1 (= latin 1) and ASCII are both codesets I<and> encodings at
1114the same time, which can be confusing.
818 1115
819=over 4 1116=over 4
820 1117
821=item JSON 1.07 1118=item C<utf8> flag disabled
822 1119
823Slow (but very portable, as it is written in pure Perl). 1120When C<utf8> is disabled (the default), then C<encode>/C<decode> generate
1121and expect Unicode strings, that is, characters with high ordinal Unicode
1122values (> 255) will be encoded as such characters, and likewise such
1123characters are decoded as-is, no canges to them will be done, except
1124"(re-)interpreting" them as Unicode codepoints or Unicode characters,
1125respectively (to Perl, these are the same thing in strings unless you do
1126funny/weird/dumb stuff).
824 1127
825Undocumented/buggy Unicode handling (how JSON handles Unicode values is 1128This is useful when you want to do the encoding yourself (e.g. when you
826undocumented. One can get far by feeding it Unicode strings and doing 1129want to have UTF-16 encoded JSON texts) or when some other layer does
827en-/decoding oneself, but Unicode escapes are not working properly). 1130the encoding for you (for example, when printing to a terminal using a
1131filehandle that transparently encodes to UTF-8 you certainly do NOT want
1132to UTF-8 encode your data first and have Perl encode it another time).
828 1133
829No round-tripping (strings get clobbered if they look like numbers, e.g. 1134=item C<utf8> flag enabled
830the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will
831decode into the number 2.
832 1135
833=item JSON::PC 0.01 1136If the C<utf8>-flag is enabled, C<encode>/C<decode> will encode all
1137characters using the corresponding UTF-8 multi-byte sequence, and will
1138expect your input strings to be encoded as UTF-8, that is, no "character"
1139of the input string must have any value > 255, as UTF-8 does not allow
1140that.
834 1141
835Very fast. 1142The C<utf8> flag therefore switches between two modes: disabled means you
1143will get a Unicode string in Perl, enabled means you get an UTF-8 encoded
1144octet/binary string in Perl.
836 1145
837Undocumented/buggy Unicode handling. 1146=item C<latin1> or C<ascii> flags enabled
838 1147
839No round-tripping. 1148With C<latin1> (or C<ascii>) enabled, C<encode> will escape characters
1149with ordinal values > 255 (> 127 with C<ascii>) and encode the remaining
1150characters as specified by the C<utf8> flag.
840 1151
841Has problems handling many Perl values (e.g. regex results and other magic 1152If C<utf8> is disabled, then the result is also correctly encoded in those
842values will make it croak). 1153character sets (as both are proper subsets of Unicode, meaning that a
1154Unicode string with all character values < 256 is the same thing as a
1155ISO-8859-1 string, and a Unicode string with all character values < 128 is
1156the same thing as an ASCII string in Perl).
843 1157
844Does not even generate valid JSON (C<{1,2}> gets converted to C<{1:2}> 1158If C<utf8> is enabled, you still get a correct UTF-8-encoded string,
845which is not a valid JSON text. 1159regardless of these flags, just some more characters will be escaped using
1160C<\uXXXX> then before.
846 1161
847Unmaintained (maintainer unresponsive for many months, bugs are not 1162Note that ISO-8859-1-I<encoded> strings are not compatible with UTF-8
848getting fixed). 1163encoding, while ASCII-encoded strings are. That is because the ISO-8859-1
1164encoding is NOT a subset of UTF-8 (despite the ISO-8859-1 I<codeset> being
1165a subset of Unicode), while ASCII is.
849 1166
850=item JSON::Syck 0.21 1167Surprisingly, C<decode> will ignore these flags and so treat all input
1168values as governed by the C<utf8> flag. If it is disabled, this allows you
1169to decode ISO-8859-1- and ASCII-encoded strings, as both strict subsets of
1170Unicode. If it is enabled, you can correctly decode UTF-8 encoded strings.
851 1171
852Very buggy (often crashes). 1172So neither C<latin1> nor C<ascii> are incompatible with the C<utf8> flag -
1173they only govern when the JSON output engine escapes a character or not.
853 1174
854Very inflexible (no human-readable format supported, format pretty much 1175The main use for C<latin1> is to relatively efficiently store binary data
855undocumented. I need at least a format for easy reading by humans and a 1176as JSON, at the expense of breaking compatibility with most JSON decoders.
856single-line compact format for use in a protocol, and preferably a way to
857generate ASCII-only JSON texts).
858 1177
859Completely broken (and confusingly documented) Unicode handling (Unicode 1178The main use for C<ascii> is to force the output to not contain characters
860escapes are not working properly, you need to set ImplicitUnicode to 1179with values > 127, which means you can interpret the resulting string
861I<different> values on en- and decoding to get symmetric behaviour). 1180as UTF-8, ISO-8859-1, ASCII, KOI8-R or most about any character set and
862 11818-bit-encoding, and still get the same data structure back. This is useful
863No round-tripping (simple cases work, but this depends on whether the scalar 1182when your channel for JSON transfer is not 8-bit clean or the encoding
864value was used in a numeric context or not). 1183might be mangled in between (e.g. in mail), and works because ASCII is a
865 1184proper subset of most 8-bit and multibyte encodings in use in the world.
866Dumping hashes may skip hash values depending on iterator state.
867
868Unmaintained (maintainer unresponsive for many months, bugs are not
869getting fixed).
870
871Does not check input for validity (i.e. will accept non-JSON input and
872return "something" instead of raising an exception. This is a security
873issue: imagine two banks transferring money between each other using
874JSON. One bank might parse a given non-JSON request and deduct money,
875while the other might reject the transaction with a syntax error. While a
876good protocol will at least recover, that is extra unnecessary work and
877the transaction will still not succeed).
878
879=item JSON::DWIW 0.04
880
881Very fast. Very natural. Very nice.
882
883Undocumented Unicode handling (but the best of the pack. Unicode escapes
884still don't get parsed properly).
885
886Very inflexible.
887
888No round-tripping.
889
890Does not generate valid JSON texts (key strings are often unquoted, empty keys
891result in nothing being output)
892
893Does not check input for validity.
894 1185
895=back 1186=back
896 1187
897 1188
1189=head2 JSON and ECMAscript
1190
1191JSON syntax is based on how literals are represented in javascript (the
1192not-standardised predecessor of ECMAscript) which is presumably why it is
1193called "JavaScript Object Notation".
1194
1195However, JSON is not a subset (and also not a superset of course) of
1196ECMAscript (the standard) or javascript (whatever browsers actually
1197implement).
1198
1199If you want to use javascript's C<eval> function to "parse" JSON, you
1200might run into parse errors for valid JSON texts, or the resulting data
1201structure might not be queryable:
1202
1203One of the problems is that U+2028 and U+2029 are valid characters inside
1204JSON strings, but are not allowed in ECMAscript string literals, so the
1205following Perl fragment will not output something that can be guaranteed
1206to be parsable by javascript's C<eval>:
1207
1208 use JSON::XS;
1209
1210 print encode_json [chr 0x2028];
1211
1212The right fix for this is to use a proper JSON parser in your javascript
1213programs, and not rely on C<eval> (see for example Douglas Crockford's
1214F<json2.js> parser).
1215
1216If this is not an option, you can, as a stop-gap measure, simply encode to
1217ASCII-only JSON:
1218
1219 use JSON::XS;
1220
1221 print JSON::XS->new->ascii->encode ([chr 0x2028]);
1222
1223Note that this will enlarge the resulting JSON text quite a bit if you
1224have many non-ASCII characters. You might be tempted to run some regexes
1225to only escape U+2028 and U+2029, e.g.:
1226
1227 # DO NOT USE THIS!
1228 my $json = JSON::XS->new->utf8->encode ([chr 0x2028]);
1229 $json =~ s/\xe2\x80\xa8/\\u2028/g; # escape U+2028
1230 $json =~ s/\xe2\x80\xa9/\\u2029/g; # escape U+2029
1231 print $json;
1232
1233Note that I<this is a bad idea>: the above only works for U+2028 and
1234U+2029 and thus only for fully ECMAscript-compliant parsers. Many existing
1235javascript implementations, however, have issues with other characters as
1236well - using C<eval> naively simply I<will> cause problems.
1237
1238Another problem is that some javascript implementations reserve
1239some property names for their own purposes (which probably makes
1240them non-ECMAscript-compliant). For example, Iceweasel reserves the
1241C<__proto__> property name for it's own purposes.
1242
1243If that is a problem, you could parse try to filter the resulting JSON
1244output for these property strings, e.g.:
1245
1246 $json =~ s/"__proto__"\s*:/"__proto__renamed":/g;
1247
1248This works because C<__proto__> is not valid outside of strings, so every
1249occurence of C<"__proto__"\s*:> must be a string used as property name.
1250
1251If you know of other incompatibilities, please let me know.
1252
1253
898=head2 JSON and YAML 1254=head2 JSON and YAML
899 1255
900You often hear that JSON is a subset (or a close subset) of YAML. This is, 1256You often hear that JSON is a subset of YAML. This is, however, a mass
901however, a mass hysteria and very far from the truth. In general, there is 1257hysteria(*) and very far from the truth (as of the time of this writing),
902no way to configure JSON::XS to output a data structure as valid YAML. 1258so let me state it clearly: I<in general, there is no way to configure
1259JSON::XS to output a data structure as valid YAML> that works in all
1260cases.
903 1261
904If you really must use JSON::XS to generate YAML, you should use this 1262If you really must use JSON::XS to generate YAML, you should use this
905algorithm (subject to change in future versions): 1263algorithm (subject to change in future versions):
906 1264
907 my $to_yaml = JSON::XS->new->utf8->space_after (1); 1265 my $to_yaml = JSON::XS->new->utf8->space_after (1);
908 my $yaml = $to_yaml->encode ($ref) . "\n"; 1266 my $yaml = $to_yaml->encode ($ref) . "\n";
909 1267
910This will usually generate JSON texts that also parse as valid 1268This will I<usually> generate JSON texts that also parse as valid
911YAML. Please note that YAML has hardcoded limits on (simple) object key 1269YAML. Please note that YAML has hardcoded limits on (simple) object key
912lengths that JSON doesn't have, so you should make sure that your hash 1270lengths that JSON doesn't have and also has different and incompatible
1271unicode handling, so you should make sure that your hash keys are
913keys are noticeably shorter than the 1024 characters YAML allows. 1272noticeably shorter than the 1024 "stream characters" YAML allows and that
1273you do not have characters with codepoint values outside the Unicode BMP
1274(basic multilingual page). YAML also does not allow C<\/> sequences in
1275strings (which JSON::XS does not I<currently> generate, but other JSON
1276generators might).
914 1277
915There might be other incompatibilities that I am not aware of. In general 1278There might be other incompatibilities that I am not aware of (or the YAML
1279specification has been changed yet again - it does so quite often). In
916you should not try to generate YAML with a JSON generator or vice versa, 1280general you should not try to generate YAML with a JSON generator or vice
917or try to parse JSON with a YAML parser or vice versa: chances are high 1281versa, or try to parse JSON with a YAML parser or vice versa: chances are
918that you will run into severe interoperability problems. 1282high that you will run into severe interoperability problems when you
1283least expect it.
1284
1285=over 4
1286
1287=item (*)
1288
1289I have been pressured multiple times by Brian Ingerson (one of the
1290authors of the YAML specification) to remove this paragraph, despite him
1291acknowledging that the actual incompatibilities exist. As I was personally
1292bitten by this "JSON is YAML" lie, I refused and said I will continue to
1293educate people about these issues, so others do not run into the same
1294problem again and again. After this, Brian called me a (quote)I<complete
1295and worthless idiot>(unquote).
1296
1297In my opinion, instead of pressuring and insulting people who actually
1298clarify issues with YAML and the wrong statements of some of its
1299proponents, I would kindly suggest reading the JSON spec (which is not
1300that difficult or long) and finally make YAML compatible to it, and
1301educating users about the changes, instead of spreading lies about the
1302real compatibility for many I<years> and trying to silence people who
1303point out that it isn't true.
1304
1305=back
919 1306
920 1307
921=head2 SPEED 1308=head2 SPEED
922 1309
923It seems that JSON::XS is surprisingly fast, as shown in the following 1310It seems that JSON::XS is surprisingly fast, as shown in the following
924tables. They have been generated with the help of the C<eg/bench> program 1311tables. They have been generated with the help of the C<eg/bench> program
925in the JSON::XS distribution, to make it easy to compare on your own 1312in the JSON::XS distribution, to make it easy to compare on your own
926system. 1313system.
927 1314
928First comes a comparison between various modules using a very short 1315First comes a comparison between various modules using
929single-line JSON string: 1316a very short single-line JSON string (also available at
1317L<http://dist.schmorp.de/misc/json/short.json>).
930 1318
931 {"method": "handleMessage", "params": ["user1", "we were just talking"], \ 1319 {"method": "handleMessage", "params": ["user1",
932 "id": null, "array":[1,11,234,-5,1e5,1e7, true, false]} 1320 "we were just talking"], "id": null, "array":[1,11,234,-5,1e5,1e7,
1321 true, false]}
933 1322
934It shows the number of encodes/decodes per second (JSON::XS uses 1323It shows the number of encodes/decodes per second (JSON::XS uses
935the functional interface, while JSON::XS/2 uses the OO interface 1324the functional interface, while JSON::XS/2 uses the OO interface
936with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables 1325with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables
937shrink). Higher is better: 1326shrink). Higher is better:
953about three times faster on decoding, and over forty times faster 1342about three times faster on decoding, and over forty times faster
954than JSON, even with pretty-printing and key sorting. It also compares 1343than JSON, even with pretty-printing and key sorting. It also compares
955favourably to Storable for small amounts of data. 1344favourably to Storable for small amounts of data.
956 1345
957Using a longer test string (roughly 18KB, generated from Yahoo! Locals 1346Using a longer test string (roughly 18KB, generated from Yahoo! Locals
958search API (http://nanoref.com/yahooapis/mgPdGg): 1347search API (L<http://dist.schmorp.de/misc/json/long.json>).
959 1348
960 module | encode | decode | 1349 module | encode | decode |
961 -----------|------------|------------| 1350 -----------|------------|------------|
962 JSON 1.x | 55.260 | 34.971 | 1351 JSON 1.x | 55.260 | 34.971 |
963 JSON::DWIW | 825.228 | 1082.513 | 1352 JSON::DWIW | 825.228 | 1082.513 |
1000 1389
1001Third, JSON::XS recurses using the C stack when decoding objects and 1390Third, JSON::XS recurses using the C stack when decoding objects and
1002arrays. The C stack is a limited resource: for instance, on my amd64 1391arrays. The C stack is a limited resource: for instance, on my amd64
1003machine with 8MB of stack size I can decode around 180k nested arrays but 1392machine with 8MB of stack size I can decode around 180k nested arrays but
1004only 14k nested JSON objects (due to perl itself recursing deeply on croak 1393only 14k nested JSON objects (due to perl itself recursing deeply on croak
1005to free the temporary). If that is exceeded, the program crashes. to be 1394to free the temporary). If that is exceeded, the program crashes. To be
1006conservative, the default nesting limit is set to 512. If your process 1395conservative, the default nesting limit is set to 512. If your process
1007has a smaller stack, you should adjust this setting accordingly with the 1396has a smaller stack, you should adjust this setting accordingly with the
1008C<max_depth> method. 1397C<max_depth> method.
1009 1398
1010And last but least, something else could bomb you that I forgot to think 1399Something else could bomb you, too, that I forgot to think of. In that
1011of. In that case, you get to keep the pieces. I am always open for hints, 1400case, you get to keep the pieces. I am always open for hints, though...
1012though... 1401
1402Also keep in mind that JSON::XS might leak contents of your Perl data
1403structures in its error messages, so when you serialise sensitive
1404information you might want to make sure that exceptions thrown by JSON::XS
1405will not end up in front of untrusted eyes.
1013 1406
1014If you are using JSON::XS to return packets to consumption 1407If you are using JSON::XS to return packets to consumption
1015by JavaScript scripts in a browser you should have a look at 1408by JavaScript scripts in a browser you should have a look at
1016L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether 1409L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether
1017you are vulnerable to some common attack vectors (which really are browser 1410you are vulnerable to some common attack vectors (which really are browser
1018design bugs, but it is still you who will have to deal with it, as major 1411design bugs, but it is still you who will have to deal with it, as major
1019browser developers care only for features, not about doing security 1412browser developers care only for features, not about getting security
1020right). 1413right).
1021 1414
1022 1415
1023=head1 THREADS 1416=head1 THREADS
1024 1417
1025This module is I<not> guaranteed to be thread safe and there are no 1418This module is I<not> guaranteed to be thread safe and there are no
1026plans to change this until Perl gets thread support (as opposed to the 1419plans to change this until Perl gets thread support (as opposed to the
1027horribly slow so-called "threads" which are simply slow and bloated 1420horribly slow so-called "threads" which are simply slow and bloated
1028process simulations - use fork, its I<much> faster, cheaper, better). 1421process simulations - use fork, it's I<much> faster, cheaper, better).
1029 1422
1030(It might actually work, but you have been warned). 1423(It might actually work, but you have been warned).
1031 1424
1032 1425
1033=head1 BUGS 1426=head1 BUGS
1034 1427
1035While the goal of this module is to be correct, that unfortunately does 1428While the goal of this module is to be correct, that unfortunately does
1036not mean its bug-free, only that I think its design is bug-free. It is 1429not mean it's bug-free, only that I think its design is bug-free. If you
1037still relatively early in its development. If you keep reporting bugs they 1430keep reporting bugs they will be fixed swiftly, though.
1038will be fixed swiftly, though.
1039 1431
1040Please refrain from using rt.cpan.org or any other bug reporting 1432Please refrain from using rt.cpan.org or any other bug reporting
1041service. I put the contact address into my modules for a reason. 1433service. I put the contact address into my modules for a reason.
1042 1434
1043=cut 1435=cut
1063 "--" => sub { $_[0] = ${$_[0]} - 1 }, 1455 "--" => sub { $_[0] = ${$_[0]} - 1 },
1064 fallback => 1; 1456 fallback => 1;
1065 1457
10661; 14581;
1067 1459
1460=head1 SEE ALSO
1461
1462The F<json_xs> command line utility for quick experiments.
1463
1068=head1 AUTHOR 1464=head1 AUTHOR
1069 1465
1070 Marc Lehmann <schmorp@schmorp.de> 1466 Marc Lehmann <schmorp@schmorp.de>
1071 http://home.schmorp.de/ 1467 http://home.schmorp.de/
1072 1468

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines