ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/JSON-XS/XS.pm
(Generate patch)

Comparing JSON-XS/XS.pm (file contents):
Revision 1.73 by root, Sun Nov 25 19:36:54 2007 UTC vs.
Revision 1.110 by root, Sun Jul 20 17:55:19 2008 UTC

1=head1 NAME 1=head1 NAME
2 2
3JSON::XS - JSON serialising/deserialising, done correctly and fast 3JSON::XS - JSON serialising/deserialising, done correctly and fast
4
5=encoding utf-8
4 6
5JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ 7JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ
6 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html) 8 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html)
7 9
8=head1 SYNOPSIS 10=head1 SYNOPSIS
10 use JSON::XS; 12 use JSON::XS;
11 13
12 # exported functions, they croak on error 14 # exported functions, they croak on error
13 # and expect/generate UTF-8 15 # and expect/generate UTF-8
14 16
15 $utf8_encoded_json_text = to_json $perl_hash_or_arrayref; 17 $utf8_encoded_json_text = encode_json $perl_hash_or_arrayref;
16 $perl_hash_or_arrayref = from_json $utf8_encoded_json_text; 18 $perl_hash_or_arrayref = decode_json $utf8_encoded_json_text;
17 19
18 # OO-interface 20 # OO-interface
19 21
20 $coder = JSON::XS->new->ascii->pretty->allow_nonref; 22 $coder = JSON::XS->new->ascii->pretty->allow_nonref;
21 $pretty_printed_unencoded = $coder->encode ($perl_scalar); 23 $pretty_printed_unencoded = $coder->encode ($perl_scalar);
22 $perl_scalar = $coder->decode ($unicode_json_text); 24 $perl_scalar = $coder->decode ($unicode_json_text);
23 25
26 # Note that JSON version 2.0 and above will automatically use JSON::XS
27 # if available, at virtually no speed overhead either, so you should
28 # be able to just:
29
30 use JSON;
31
32 # and do the same things, except that you have a pure-perl fallback now.
33
24=head1 DESCRIPTION 34=head1 DESCRIPTION
25 35
26This module converts Perl data structures to JSON and vice versa. Its 36This module converts Perl data structures to JSON and vice versa. Its
27primary goal is to be I<correct> and its secondary goal is to be 37primary goal is to be I<correct> and its secondary goal is to be
28I<fast>. To reach the latter goal it was written in C. 38I<fast>. To reach the latter goal it was written in C.
39
40Beginning with version 2.0 of the JSON module, when both JSON and
41JSON::XS are installed, then JSON will fall back on JSON::XS (this can be
42overridden) with no overhead due to emulation (by inheriting constructor
43and methods). If JSON::XS is not available, it will fall back to the
44compatible JSON::PP module as backend, so using JSON instead of JSON::XS
45gives you a portable JSON API that can be fast when you need and doesn't
46require a C compiler when that is a problem.
29 47
30As this is the n-th-something JSON module on CPAN, what was the reason 48As this is the n-th-something JSON module on CPAN, what was the reason
31to write yet another JSON module? While it seems there are many JSON 49to write yet another JSON module? While it seems there are many JSON
32modules, none of them correctly handle all corner cases, and in most cases 50modules, none of them correctly handle all corner cases, and in most cases
33their maintainers are unresponsive, gone missing, or not listening to bug 51their maintainers are unresponsive, gone missing, or not listening to bug
42 60
43=over 4 61=over 4
44 62
45=item * correct Unicode handling 63=item * correct Unicode handling
46 64
47This module knows how to handle Unicode, and even documents how and when 65This module knows how to handle Unicode, documents how and when it does
48it does so. 66so, and even documents what "correct" means.
49 67
50=item * round-trip integrity 68=item * round-trip integrity
51 69
52When you serialise a perl data structure using only datatypes supported 70When you serialise a perl data structure using only data types supported
53by JSON, the deserialised data structure is identical on the Perl level. 71by JSON, the deserialised data structure is identical on the Perl level.
54(e.g. the string "2.0" doesn't suddenly become "2" just because it looks 72(e.g. the string "2.0" doesn't suddenly become "2" just because it looks
55like a number). 73like a number). There minor I<are> exceptions to this, read the MAPPING
74section below to learn about those.
56 75
57=item * strict checking of JSON correctness 76=item * strict checking of JSON correctness
58 77
59There is no guessing, no generating of illegal JSON texts by default, 78There is no guessing, no generating of illegal JSON texts by default,
60and only JSON is accepted as input by default (the latter is a security 79and only JSON is accepted as input by default (the latter is a security
61feature). 80feature).
62 81
63=item * fast 82=item * fast
64 83
65Compared to other JSON modules, this module compares favourably in terms 84Compared to other JSON modules and other serialisers such as Storable,
66of speed, too. 85this module usually compares favourably in terms of speed, too.
67 86
68=item * simple to use 87=item * simple to use
69 88
70This module has both a simple functional interface as well as an OO 89This module has both a simple functional interface as well as an object
71interface. 90oriented interface interface.
72 91
73=item * reasonably versatile output formats 92=item * reasonably versatile output formats
74 93
75You can choose between the most compact guaranteed single-line format 94You can choose between the most compact guaranteed-single-line format
76possible (nice for simple line-based protocols), a pure-ascii format 95possible (nice for simple line-based protocols), a pure-ASCII format
77(for when your transport is not 8-bit clean, still supports the whole 96(for when your transport is not 8-bit clean, still supports the whole
78Unicode range), or a pretty-printed format (for when you want to read that 97Unicode range), or a pretty-printed format (for when you want to read that
79stuff). Or you can combine those features in whatever way you like. 98stuff). Or you can combine those features in whatever way you like.
80 99
81=back 100=back
82 101
83=cut 102=cut
84 103
85package JSON::XS; 104package JSON::XS;
86 105
106no warnings;
87use strict; 107use strict;
88 108
89our $VERSION = '1.6'; 109our $VERSION = '2.2222';
90our @ISA = qw(Exporter); 110our @ISA = qw(Exporter);
91 111
92our @EXPORT = qw(to_json from_json); 112our @EXPORT = qw(encode_json decode_json to_json from_json);
113
114sub to_json($) {
115 require Carp;
116 Carp::croak ("JSON::XS::to_json has been renamed to encode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
117}
118
119sub from_json($) {
120 require Carp;
121 Carp::croak ("JSON::XS::from_json has been renamed to decode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
122}
93 123
94use Exporter; 124use Exporter;
95use XSLoader; 125use XSLoader;
96 126
97=head1 FUNCTIONAL INTERFACE 127=head1 FUNCTIONAL INTERFACE
99The following convenience methods are provided by this module. They are 129The following convenience methods are provided by this module. They are
100exported by default: 130exported by default:
101 131
102=over 4 132=over 4
103 133
104=item $json_text = to_json $perl_scalar 134=item $json_text = encode_json $perl_scalar
105 135
106Converts the given Perl data structure to a UTF-8 encoded, binary string 136Converts the given Perl data structure to a UTF-8 encoded, binary string
107(that is, the string contains octets only). Croaks on error. 137(that is, the string contains octets only). Croaks on error.
108 138
109This function call is functionally identical to: 139This function call is functionally identical to:
110 140
111 $json_text = JSON::XS->new->utf8->encode ($perl_scalar) 141 $json_text = JSON::XS->new->utf8->encode ($perl_scalar)
112 142
113except being faster. 143Except being faster.
114 144
115=item $perl_scalar = from_json $json_text 145=item $perl_scalar = decode_json $json_text
116 146
117The opposite of C<to_json>: expects an UTF-8 (binary) string and tries 147The opposite of C<encode_json>: expects an UTF-8 (binary) string and tries
118to parse that as an UTF-8 encoded JSON text, returning the resulting 148to parse that as an UTF-8 encoded JSON text, returning the resulting
119reference. Croaks on error. 149reference. Croaks on error.
120 150
121This function call is functionally identical to: 151This function call is functionally identical to:
122 152
123 $perl_scalar = JSON::XS->new->utf8->decode ($json_text) 153 $perl_scalar = JSON::XS->new->utf8->decode ($json_text)
124 154
125except being faster. 155Except being faster.
126 156
127=item $is_boolean = JSON::XS::is_bool $scalar 157=item $is_boolean = JSON::XS::is_bool $scalar
128 158
129Returns true if the passed scalar represents either JSON::XS::true or 159Returns true if the passed scalar represents either JSON::XS::true or
130JSON::XS::false, two constants that act like C<1> and C<0>, respectively 160JSON::XS::false, two constants that act like C<1> and C<0>, respectively
148This enables you to store Unicode characters as single characters in a 178This enables you to store Unicode characters as single characters in a
149Perl string - very natural. 179Perl string - very natural.
150 180
151=item 2. Perl does I<not> associate an encoding with your strings. 181=item 2. Perl does I<not> associate an encoding with your strings.
152 182
153Unless you force it to, e.g. when matching it against a regex, or printing 183... until you force it to, e.g. when matching it against a regex, or
154the scalar to a file, in which case Perl either interprets your string as 184printing the scalar to a file, in which case Perl either interprets your
155locale-encoded text, octets/binary, or as Unicode, depending on various 185string as locale-encoded text, octets/binary, or as Unicode, depending
156settings. In no case is an encoding stored together with your data, it is 186on various settings. In no case is an encoding stored together with your
157I<use> that decides encoding, not any magical metadata. 187data, it is I<use> that decides encoding, not any magical meta data.
158 188
159=item 3. The internal utf-8 flag has no meaning with regards to the 189=item 3. The internal utf-8 flag has no meaning with regards to the
160encoding of your string. 190encoding of your string.
161 191
162Just ignore that flag unless you debug a Perl bug, a module written in 192Just ignore that flag unless you debug a Perl bug, a module written in
168 198
169If you didn't know about that flag, just the better, pretend it doesn't 199If you didn't know about that flag, just the better, pretend it doesn't
170exist. 200exist.
171 201
172=item 4. A "Unicode String" is simply a string where each character can be 202=item 4. A "Unicode String" is simply a string where each character can be
173validly interpreted as a Unicode codepoint. 203validly interpreted as a Unicode code point.
174 204
175If you have UTF-8 encoded data, it is no longer a Unicode string, but a 205If you have UTF-8 encoded data, it is no longer a Unicode string, but a
176Unicode string encoded in UTF-8, giving you a binary string. 206Unicode string encoded in UTF-8, giving you a binary string.
177 207
178=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string. 208=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string.
216 246
217If C<$enable> is false, then the C<encode> method will not escape Unicode 247If C<$enable> is false, then the C<encode> method will not escape Unicode
218characters unless required by the JSON syntax or other flags. This results 248characters unless required by the JSON syntax or other flags. This results
219in a faster and more compact format. 249in a faster and more compact format.
220 250
251See also the section I<ENCODING/CODESET FLAG NOTES> later in this
252document.
253
221The main use for this flag is to produce JSON texts that can be 254The main use for this flag is to produce JSON texts that can be
222transmitted over a 7-bit channel, as the encoded JSON texts will not 255transmitted over a 7-bit channel, as the encoded JSON texts will not
223contain any 8 bit characters. 256contain any 8 bit characters.
224 257
225 JSON::XS->new->ascii (1)->encode ([chr 0x10401]) 258 JSON::XS->new->ascii (1)->encode ([chr 0x10401])
236will not be affected in any way by this flag, as C<decode> by default 269will not be affected in any way by this flag, as C<decode> by default
237expects Unicode, which is a strict superset of latin1. 270expects Unicode, which is a strict superset of latin1.
238 271
239If C<$enable> is false, then the C<encode> method will not escape Unicode 272If C<$enable> is false, then the C<encode> method will not escape Unicode
240characters unless required by the JSON syntax or other flags. 273characters unless required by the JSON syntax or other flags.
274
275See also the section I<ENCODING/CODESET FLAG NOTES> later in this
276document.
241 277
242The main use for this flag is efficiently encoding binary data as JSON 278The main use for this flag is efficiently encoding binary data as JSON
243text, as most octets will not be escaped, resulting in a smaller encoded 279text, as most octets will not be escaped, resulting in a smaller encoded
244size. The disadvantage is that the resulting JSON text is encoded 280size. The disadvantage is that the resulting JSON text is encoded
245in latin1 (and must correctly be treated as such when storing and 281in latin1 (and must correctly be treated as such when storing and
265If C<$enable> is false, then the C<encode> method will return the JSON 301If C<$enable> is false, then the C<encode> method will return the JSON
266string as a (non-encoded) Unicode string, while C<decode> expects thus a 302string as a (non-encoded) Unicode string, while C<decode> expects thus a
267Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs 303Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs
268to be done yourself, e.g. using the Encode module. 304to be done yourself, e.g. using the Encode module.
269 305
306See also the section I<ENCODING/CODESET FLAG NOTES> later in this
307document.
308
270Example, output UTF-16BE-encoded JSON: 309Example, output UTF-16BE-encoded JSON:
271 310
272 use Encode; 311 use Encode;
273 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object); 312 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object);
274 313
276 315
277 use Encode; 316 use Encode;
278 $object = JSON::XS->new->decode (decode "UTF-32LE", $jsontext); 317 $object = JSON::XS->new->decode (decode "UTF-32LE", $jsontext);
279 318
280=item $json = $json->pretty ([$enable]) 319=item $json = $json->pretty ([$enable])
281
282=item $enabled = $json->get_pretty
283 320
284This enables (or disables) all of the C<indent>, C<space_before> and 321This enables (or disables) all of the C<indent>, C<space_before> and
285C<space_after> (and in the future possibly more) flags in one call to 322C<space_after> (and in the future possibly more) flags in one call to
286generate the most readable (or most compact) form possible. 323generate the most readable (or most compact) form possible.
287 324
427resulting in an invalid JSON text: 464resulting in an invalid JSON text:
428 465
429 JSON::XS->new->allow_nonref->encode ("Hello, World!") 466 JSON::XS->new->allow_nonref->encode ("Hello, World!")
430 => "Hello, World!" 467 => "Hello, World!"
431 468
469=item $json = $json->allow_unknown ([$enable])
470
471=item $enabled = $json->get_allow_unknown
472
473If C<$enable> is true (or missing), then C<encode> will I<not> throw an
474exception when it encounters values it cannot represent in JSON (for
475example, filehandles) but instead will encode a JSON C<null> value. Note
476that blessed objects are not included here and are handled separately by
477c<allow_nonref>.
478
479If C<$enable> is false (the default), then C<encode> will throw an
480exception when it encounters anything it cannot encode as JSON.
481
482This option does not affect C<decode> in any way, and it is recommended to
483leave it off unless you know your communications partner.
484
432=item $json = $json->allow_blessed ([$enable]) 485=item $json = $json->allow_blessed ([$enable])
433 486
434=item $enabled = $json->get_allow_bless 487=item $enabled = $json->get_allow_blessed
435 488
436If C<$enable> is true (or missing), then the C<encode> method will not 489If C<$enable> is true (or missing), then the C<encode> method will not
437barf when it encounters a blessed reference. Instead, the value of the 490barf when it encounters a blessed reference. Instead, the value of the
438B<convert_blessed> option will decide whether C<null> (C<convert_blessed> 491B<convert_blessed> option will decide whether C<null> (C<convert_blessed>
439disabled or no C<to_json> method found) or a representation of the 492disabled or no C<TO_JSON> method found) or a representation of the
440object (C<convert_blessed> enabled and C<to_json> method found) is being 493object (C<convert_blessed> enabled and C<TO_JSON> method found) is being
441encoded. Has no effect on C<decode>. 494encoded. Has no effect on C<decode>.
442 495
443If C<$enable> is false (the default), then C<encode> will throw an 496If C<$enable> is false (the default), then C<encode> will throw an
444exception when it encounters a blessed object. 497exception when it encounters a blessed object.
445 498
457The C<TO_JSON> method may safely call die if it wants. If C<TO_JSON> 510The C<TO_JSON> method may safely call die if it wants. If C<TO_JSON>
458returns other blessed objects, those will be handled in the same 511returns other blessed objects, those will be handled in the same
459way. C<TO_JSON> must take care of not causing an endless recursion cycle 512way. C<TO_JSON> must take care of not causing an endless recursion cycle
460(== crash) in this case. The name of C<TO_JSON> was chosen because other 513(== crash) in this case. The name of C<TO_JSON> was chosen because other
461methods called by the Perl core (== not by the user of the object) are 514methods called by the Perl core (== not by the user of the object) are
462usually in upper case letters and to avoid collisions with the C<to_json> 515usually in upper case letters and to avoid collisions with any C<to_json>
463function. 516function or method.
464 517
465This setting does not yet influence C<decode> in any way, but in the 518This setting does not yet influence C<decode> in any way, but in the
466future, global hooks might get installed that influence C<decode> and are 519future, global hooks might get installed that influence C<decode> and are
467enabled by this setting. 520enabled by this setting.
468 521
576=item $json = $json->max_depth ([$maximum_nesting_depth]) 629=item $json = $json->max_depth ([$maximum_nesting_depth])
577 630
578=item $max_depth = $json->get_max_depth 631=item $max_depth = $json->get_max_depth
579 632
580Sets the maximum nesting level (default C<512>) accepted while encoding 633Sets the maximum nesting level (default C<512>) accepted while encoding
581or decoding. If the JSON text or Perl data structure has an equal or 634or decoding. If a higher nesting level is detected in JSON text or a Perl
582higher nesting level then this limit, then the encoder and decoder will 635data structure, then the encoder and decoder will stop and croak at that
583stop and croak at that point. 636point.
584 637
585Nesting level is defined by number of hash- or arrayrefs that the encoder 638Nesting level is defined by number of hash- or arrayrefs that the encoder
586needs to traverse to reach a given point or the number of C<{> or C<[> 639needs to traverse to reach a given point or the number of C<{> or C<[>
587characters without their matching closing parenthesis crossed to reach a 640characters without their matching closing parenthesis crossed to reach a
588given character in a string. 641given character in a string.
589 642
590Setting the maximum depth to one disallows any nesting, so that ensures 643Setting the maximum depth to one disallows any nesting, so that ensures
591that the object is only a single hash/object or array. 644that the object is only a single hash/object or array.
592 645
593The argument to C<max_depth> will be rounded up to the next highest power
594of two. If no argument is given, the highest possible setting will be 646If no argument is given, the highest possible setting will be used, which
595used, which is rarely useful. 647is rarely useful.
648
649Note that nesting is implemented by recursion in C. The default value has
650been chosen to be as large as typical operating systems allow without
651crashing.
596 652
597See SECURITY CONSIDERATIONS, below, for more info on why this is useful. 653See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
598 654
599=item $json = $json->max_size ([$maximum_string_size]) 655=item $json = $json->max_size ([$maximum_string_size])
600 656
601=item $max_size = $json->get_max_size 657=item $max_size = $json->get_max_size
602 658
603Set the maximum length a JSON text may have (in bytes) where decoding is 659Set the maximum length a JSON text may have (in bytes) where decoding is
604being attempted. The default is C<0>, meaning no limit. When C<decode> 660being attempted. The default is C<0>, meaning no limit. When C<decode>
605is called on a string longer then this number of characters it will not 661is called on a string that is longer then this many bytes, it will not
606attempt to decode the string but throw an exception. This setting has no 662attempt to decode the string but throw an exception. This setting has no
607effect on C<encode> (yet). 663effect on C<encode> (yet).
608 664
609The argument to C<max_size> will be rounded up to the next B<highest> 665If no argument is given, the limit check will be deactivated (same as when
610power of two (so may be more than requested). If no argument is given, the 666C<0> is specified).
611limit check will be deactivated (same as when C<0> is specified).
612 667
613See SECURITY CONSIDERATIONS, below, for more info on why this is useful. 668See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
614 669
615=item $json_text = $json->encode ($perl_scalar) 670=item $json_text = $json->encode ($perl_scalar)
616 671
645 => ([], 3) 700 => ([], 3)
646 701
647=back 702=back
648 703
649 704
705=head1 INCREMENTAL PARSING
706
707In some cases, there is the need for incremental parsing of JSON
708texts. While this module always has to keep both JSON text and resulting
709Perl data structure in memory at one time, it does allow you to parse a
710JSON stream incrementally. It does so by accumulating text until it has
711a full JSON object, which it then can decode. This process is similar to
712using C<decode_prefix> to see if a full JSON object is available, but
713is much more efficient (and can be implemented with a minimum of method
714calls).
715
716JSON::XS will only attempt to parse the JSON text once it is sure it
717has enough text to get a decisive result, using a very simple but
718truly incremental parser. This means that it sometimes won't stop as
719early as the full parser, for example, it doesn't detect parenthese
720mismatches. The only thing it guarantees is that it starts decoding as
721soon as a syntactically valid JSON text has been seen. This means you need
722to set resource limits (e.g. C<max_size>) to ensure the parser will stop
723parsing in the presence if syntax errors.
724
725The following methods implement this incremental parser.
726
727=over 4
728
729=item [void, scalar or list context] = $json->incr_parse ([$string])
730
731This is the central parsing function. It can both append new text and
732extract objects from the stream accumulated so far (both of these
733functions are optional).
734
735If C<$string> is given, then this string is appended to the already
736existing JSON fragment stored in the C<$json> object.
737
738After that, if the function is called in void context, it will simply
739return without doing anything further. This can be used to add more text
740in as many chunks as you want.
741
742If the method is called in scalar context, then it will try to extract
743exactly I<one> JSON object. If that is successful, it will return this
744object, otherwise it will return C<undef>. If there is a parse error,
745this method will croak just as C<decode> would do (one can then use
746C<incr_skip> to skip the errornous part). This is the most common way of
747using the method.
748
749And finally, in list context, it will try to extract as many objects
750from the stream as it can find and return them, or the empty list
751otherwise. For this to work, there must be no separators between the JSON
752objects or arrays, instead they must be concatenated back-to-back. If
753an error occurs, an exception will be raised as in the scalar context
754case. Note that in this case, any previously-parsed JSON texts will be
755lost.
756
757=item $lvalue_string = $json->incr_text
758
759This method returns the currently stored JSON fragment as an lvalue, that
760is, you can manipulate it. This I<only> works when a preceding call to
761C<incr_parse> in I<scalar context> successfully returned an object. Under
762all other circumstances you must not call this function (I mean it.
763although in simple tests it might actually work, it I<will> fail under
764real world conditions). As a special exception, you can also call this
765method before having parsed anything.
766
767This function is useful in two cases: a) finding the trailing text after a
768JSON object or b) parsing multiple JSON objects separated by non-JSON text
769(such as commas).
770
771=item $json->incr_skip
772
773This will reset the state of the incremental parser and will remove the
774parsed text from the input buffer. This is useful after C<incr_parse>
775died, in which case the input buffer and incremental parser state is left
776unchanged, to skip the text parsed so far and to reset the parse state.
777
778=item $json->incr_reset
779
780This completely resets the incremental parser, that is, after this call,
781it will be as if the parser had never parsed anything.
782
783This is useful if you want ot repeatedly parse JSON objects and want to
784ignore any trailing data, which means you have to reset the parser after
785each successful decode.
786
787=back
788
789=head2 LIMITATIONS
790
791All options that affect decoding are supported, except
792C<allow_nonref>. The reason for this is that it cannot be made to
793work sensibly: JSON objects and arrays are self-delimited, i.e. you can concatenate
794them back to back and still decode them perfectly. This does not hold true
795for JSON numbers, however.
796
797For example, is the string C<1> a single JSON number, or is it simply the
798start of C<12>? Or is C<12> a single JSON number, or the concatenation
799of C<1> and C<2>? In neither case you can tell, and this is why JSON::XS
800takes the conservative route and disallows this case.
801
802=head2 EXAMPLES
803
804Some examples will make all this clearer. First, a simple example that
805works similarly to C<decode_prefix>: We want to decode the JSON object at
806the start of a string and identify the portion after the JSON object:
807
808 my $text = "[1,2,3] hello";
809
810 my $json = new JSON::XS;
811
812 my $obj = $json->incr_parse ($text)
813 or die "expected JSON object or array at beginning of string";
814
815 my $tail = $json->incr_text;
816 # $tail now contains " hello"
817
818Easy, isn't it?
819
820Now for a more complicated example: Imagine a hypothetical protocol where
821you read some requests from a TCP stream, and each request is a JSON
822array, without any separation between them (in fact, it is often useful to
823use newlines as "separators", as these get interpreted as whitespace at
824the start of the JSON text, which makes it possible to test said protocol
825with C<telnet>...).
826
827Here is how you'd do it (it is trivial to write this in an event-based
828manner):
829
830 my $json = new JSON::XS;
831
832 # read some data from the socket
833 while (sysread $socket, my $buf, 4096) {
834
835 # split and decode as many requests as possible
836 for my $request ($json->incr_parse ($buf)) {
837 # act on the $request
838 }
839 }
840
841Another complicated example: Assume you have a string with JSON objects
842or arrays, all separated by (optional) comma characters (e.g. C<[1],[2],
843[3]>). To parse them, we have to skip the commas between the JSON texts,
844and here is where the lvalue-ness of C<incr_text> comes in useful:
845
846 my $text = "[1],[2], [3]";
847 my $json = new JSON::XS;
848
849 # void context, so no parsing done
850 $json->incr_parse ($text);
851
852 # now extract as many objects as possible. note the
853 # use of scalar context so incr_text can be called.
854 while (my $obj = $json->incr_parse) {
855 # do something with $obj
856
857 # now skip the optional comma
858 $json->incr_text =~ s/^ \s* , //x;
859 }
860
861Now lets go for a very complex example: Assume that you have a gigantic
862JSON array-of-objects, many gigabytes in size, and you want to parse it,
863but you cannot load it into memory fully (this has actually happened in
864the real world :).
865
866Well, you lost, you have to implement your own JSON parser. But JSON::XS
867can still help you: You implement a (very simple) array parser and let
868JSON decode the array elements, which are all full JSON objects on their
869own (this wouldn't work if the array elements could be JSON numbers, for
870example):
871
872 my $json = new JSON::XS;
873
874 # open the monster
875 open my $fh, "<bigfile.json"
876 or die "bigfile: $!";
877
878 # first parse the initial "["
879 for (;;) {
880 sysread $fh, my $buf, 65536
881 or die "read error: $!";
882 $json->incr_parse ($buf); # void context, so no parsing
883
884 # Exit the loop once we found and removed(!) the initial "[".
885 # In essence, we are (ab-)using the $json object as a simple scalar
886 # we append data to.
887 last if $json->incr_text =~ s/^ \s* \[ //x;
888 }
889
890 # now we have the skipped the initial "[", so continue
891 # parsing all the elements.
892 for (;;) {
893 # in this loop we read data until we got a single JSON object
894 for (;;) {
895 if (my $obj = $json->incr_parse) {
896 # do something with $obj
897 last;
898 }
899
900 # add more data
901 sysread $fh, my $buf, 65536
902 or die "read error: $!";
903 $json->incr_parse ($buf); # void context, so no parsing
904 }
905
906 # in this loop we read data until we either found and parsed the
907 # separating "," between elements, or the final "]"
908 for (;;) {
909 # first skip whitespace
910 $json->incr_text =~ s/^\s*//;
911
912 # if we find "]", we are done
913 if ($json->incr_text =~ s/^\]//) {
914 print "finished.\n";
915 exit;
916 }
917
918 # if we find ",", we can continue with the next element
919 if ($json->incr_text =~ s/^,//) {
920 last;
921 }
922
923 # if we find anything else, we have a parse error!
924 if (length $json->incr_text) {
925 die "parse error near ", $json->incr_text;
926 }
927
928 # else add more data
929 sysread $fh, my $buf, 65536
930 or die "read error: $!";
931 $json->incr_parse ($buf); # void context, so no parsing
932 }
933
934This is a complex example, but most of the complexity comes from the fact
935that we are trying to be correct (bear with me if I am wrong, I never ran
936the above example :).
937
938
939
650=head1 MAPPING 940=head1 MAPPING
651 941
652This section describes how JSON::XS maps Perl values to JSON values and 942This section describes how JSON::XS maps Perl values to JSON values and
653vice versa. These mappings are designed to "do the right thing" in most 943vice versa. These mappings are designed to "do the right thing" in most
654circumstances automatically, preserving round-tripping characteristics 944circumstances automatically, preserving round-tripping characteristics
682 972
683A JSON number becomes either an integer, numeric (floating point) or 973A JSON number becomes either an integer, numeric (floating point) or
684string scalar in perl, depending on its range and any fractional parts. On 974string scalar in perl, depending on its range and any fractional parts. On
685the Perl level, there is no difference between those as Perl handles all 975the Perl level, there is no difference between those as Perl handles all
686the conversion details, but an integer may take slightly less memory and 976the conversion details, but an integer may take slightly less memory and
687might represent more values exactly than (floating point) numbers. 977might represent more values exactly than floating point numbers.
688 978
689If the number consists of digits only, JSON::XS will try to represent 979If the number consists of digits only, JSON::XS will try to represent
690it as an integer value. If that fails, it will try to represent it as 980it as an integer value. If that fails, it will try to represent it as
691a numeric (floating point) value if that is possible without loss of 981a numeric (floating point) value if that is possible without loss of
692precision. Otherwise it will preserve the number as a string value. 982precision. Otherwise it will preserve the number as a string value (in
983which case you lose roundtripping ability, as the JSON number will be
984re-encoded toa JSON string).
693 985
694Numbers containing a fractional or exponential part will always be 986Numbers containing a fractional or exponential part will always be
695represented as numeric (floating point) values, possibly at a loss of 987represented as numeric (floating point) values, possibly at a loss of
696precision. 988precision (in which case you might lose perfect roundtripping ability, but
697 989the JSON number will still be re-encoded as a JSON number).
698This might create round-tripping problems as numbers might become strings,
699but as Perl is typeless there is no other way to do it.
700 990
701=item true, false 991=item true, false
702 992
703These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>, 993These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>,
704respectively. They are overloaded to act almost exactly like the numbers 994respectively. They are overloaded to act almost exactly like the numbers
741Other unblessed references are generally not allowed and will cause an 1031Other unblessed references are generally not allowed and will cause an
742exception to be thrown, except for references to the integers C<0> and 1032exception to be thrown, except for references to the integers C<0> and
743C<1>, which get turned into C<false> and C<true> atoms in JSON. You can 1033C<1>, which get turned into C<false> and C<true> atoms in JSON. You can
744also use C<JSON::XS::false> and C<JSON::XS::true> to improve readability. 1034also use C<JSON::XS::false> and C<JSON::XS::true> to improve readability.
745 1035
746 to_json [\0,JSON::XS::true] # yields [false,true] 1036 encode_json [\0, JSON::XS::true] # yields [false,true]
747 1037
748=item JSON::XS::true, JSON::XS::false 1038=item JSON::XS::true, JSON::XS::false
749 1039
750These special values become JSON true and JSON false values, 1040These special values become JSON true and JSON false values,
751respectively. You can also use C<\1> and C<\0> directly if you want. 1041respectively. You can also use C<\1> and C<\0> directly if you want.
752 1042
753=item blessed objects 1043=item blessed objects
754 1044
755Blessed objects are not allowed. JSON::XS currently tries to encode their 1045Blessed objects are not directly representable in JSON. See the
756underlying representation (hash- or arrayref), but this behaviour might 1046C<allow_blessed> and C<convert_blessed> methods on various options on
757change in future versions. 1047how to deal with this: basically, you can choose between throwing an
1048exception, encoding the reference as if it weren't blessed, or provide
1049your own serialiser method.
758 1050
759=item simple scalars 1051=item simple scalars
760 1052
761Simple Perl scalars (any scalar that is not a reference) are the most 1053Simple Perl scalars (any scalar that is not a reference) are the most
762difficult objects to encode: JSON::XS will encode undefined scalars as 1054difficult objects to encode: JSON::XS will encode undefined scalars as
763JSON null value, scalars that have last been used in a string context 1055JSON C<null> values, scalars that have last been used in a string context
764before encoding as JSON strings and anything else as number value: 1056before encoding as JSON strings, and anything else as number value:
765 1057
766 # dump as number 1058 # dump as number
767 to_json [2] # yields [2] 1059 encode_json [2] # yields [2]
768 to_json [-3.0e17] # yields [-3e+17] 1060 encode_json [-3.0e17] # yields [-3e+17]
769 my $value = 5; to_json [$value] # yields [5] 1061 my $value = 5; encode_json [$value] # yields [5]
770 1062
771 # used as string, so dump as string 1063 # used as string, so dump as string
772 print $value; 1064 print $value;
773 to_json [$value] # yields ["5"] 1065 encode_json [$value] # yields ["5"]
774 1066
775 # undef becomes null 1067 # undef becomes null
776 to_json [undef] # yields [null] 1068 encode_json [undef] # yields [null]
777 1069
778You can force the type to be a JSON string by stringifying it: 1070You can force the type to be a JSON string by stringifying it:
779 1071
780 my $x = 3.1; # some variable containing a number 1072 my $x = 3.1; # some variable containing a number
781 "$x"; # stringified 1073 "$x"; # stringified
787 my $x = "3"; # some variable containing a string 1079 my $x = "3"; # some variable containing a string
788 $x += 0; # numify it, ensuring it will be dumped as a number 1080 $x += 0; # numify it, ensuring it will be dumped as a number
789 $x *= 1; # same thing, the choice is yours. 1081 $x *= 1; # same thing, the choice is yours.
790 1082
791You can not currently force the type in other, less obscure, ways. Tell me 1083You can not currently force the type in other, less obscure, ways. Tell me
792if you need this capability. 1084if you need this capability (but don't forget to explain why it's needed
1085:).
793 1086
794=back 1087=back
795 1088
796 1089
797=head1 COMPARISON 1090=head1 ENCODING/CODESET FLAG NOTES
798 1091
799As already mentioned, this module was created because none of the existing 1092The interested reader might have seen a number of flags that signify
800JSON modules could be made to work correctly. First I will describe the 1093encodings or codesets - C<utf8>, C<latin1> and C<ascii>. There seems to be
801problems (or pleasures) I encountered with various existing JSON modules, 1094some confusion on what these do, so here is a short comparison:
802followed by some benchmark values. JSON::XS was designed not to suffer 1095
803from any of these problems or limitations. 1096C<utf8> controls whether the JSON text created by C<encode> (and expected
1097by C<decode>) is UTF-8 encoded or not, while C<latin1> and C<ascii> only
1098control whether C<encode> escapes character values outside their respective
1099codeset range. Neither of these flags conflict with each other, although
1100some combinations make less sense than others.
1101
1102Care has been taken to make all flags symmetrical with respect to
1103C<encode> and C<decode>, that is, texts encoded with any combination of
1104these flag values will be correctly decoded when the same flags are used
1105- in general, if you use different flag settings while encoding vs. when
1106decoding you likely have a bug somewhere.
1107
1108Below comes a verbose discussion of these flags. Note that a "codeset" is
1109simply an abstract set of character-codepoint pairs, while an encoding
1110takes those codepoint numbers and I<encodes> them, in our case into
1111octets. Unicode is (among other things) a codeset, UTF-8 is an encoding,
1112and ISO-8859-1 (= latin 1) and ASCII are both codesets I<and> encodings at
1113the same time, which can be confusing.
804 1114
805=over 4 1115=over 4
806 1116
807=item JSON 1.07 1117=item C<utf8> flag disabled
808 1118
809Slow (but very portable, as it is written in pure Perl). 1119When C<utf8> is disabled (the default), then C<encode>/C<decode> generate
1120and expect Unicode strings, that is, characters with high ordinal Unicode
1121values (> 255) will be encoded as such characters, and likewise such
1122characters are decoded as-is, no canges to them will be done, except
1123"(re-)interpreting" them as Unicode codepoints or Unicode characters,
1124respectively (to Perl, these are the same thing in strings unless you do
1125funny/weird/dumb stuff).
810 1126
811Undocumented/buggy Unicode handling (how JSON handles Unicode values is 1127This is useful when you want to do the encoding yourself (e.g. when you
812undocumented. One can get far by feeding it Unicode strings and doing 1128want to have UTF-16 encoded JSON texts) or when some other layer does
813en-/decoding oneself, but Unicode escapes are not working properly). 1129the encoding for you (for example, when printing to a terminal using a
1130filehandle that transparently encodes to UTF-8 you certainly do NOT want
1131to UTF-8 encode your data first and have Perl encode it another time).
814 1132
815No round-tripping (strings get clobbered if they look like numbers, e.g. 1133=item C<utf8> flag enabled
816the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will
817decode into the number 2.
818 1134
819=item JSON::PC 0.01 1135If the C<utf8>-flag is enabled, C<encode>/C<decode> will encode all
1136characters using the corresponding UTF-8 multi-byte sequence, and will
1137expect your input strings to be encoded as UTF-8, that is, no "character"
1138of the input string must have any value > 255, as UTF-8 does not allow
1139that.
820 1140
821Very fast. 1141The C<utf8> flag therefore switches between two modes: disabled means you
1142will get a Unicode string in Perl, enabled means you get an UTF-8 encoded
1143octet/binary string in Perl.
822 1144
823Undocumented/buggy Unicode handling. 1145=item C<latin1> or C<ascii> flags enabled
824 1146
825No round-tripping. 1147With C<latin1> (or C<ascii>) enabled, C<encode> will escape characters
1148with ordinal values > 255 (> 127 with C<ascii>) and encode the remaining
1149characters as specified by the C<utf8> flag.
826 1150
827Has problems handling many Perl values (e.g. regex results and other magic 1151If C<utf8> is disabled, then the result is also correctly encoded in those
828values will make it croak). 1152character sets (as both are proper subsets of Unicode, meaning that a
1153Unicode string with all character values < 256 is the same thing as a
1154ISO-8859-1 string, and a Unicode string with all character values < 128 is
1155the same thing as an ASCII string in Perl).
829 1156
830Does not even generate valid JSON (C<{1,2}> gets converted to C<{1:2}> 1157If C<utf8> is enabled, you still get a correct UTF-8-encoded string,
831which is not a valid JSON text. 1158regardless of these flags, just some more characters will be escaped using
1159C<\uXXXX> then before.
832 1160
833Unmaintained (maintainer unresponsive for many months, bugs are not 1161Note that ISO-8859-1-I<encoded> strings are not compatible with UTF-8
834getting fixed). 1162encoding, while ASCII-encoded strings are. That is because the ISO-8859-1
1163encoding is NOT a subset of UTF-8 (despite the ISO-8859-1 I<codeset> being
1164a subset of Unicode), while ASCII is.
835 1165
836=item JSON::Syck 0.21 1166Surprisingly, C<decode> will ignore these flags and so treat all input
1167values as governed by the C<utf8> flag. If it is disabled, this allows you
1168to decode ISO-8859-1- and ASCII-encoded strings, as both strict subsets of
1169Unicode. If it is enabled, you can correctly decode UTF-8 encoded strings.
837 1170
838Very buggy (often crashes). 1171So neither C<latin1> nor C<ascii> are incompatible with the C<utf8> flag -
1172they only govern when the JSON output engine escapes a character or not.
839 1173
840Very inflexible (no human-readable format supported, format pretty much 1174The main use for C<latin1> is to relatively efficiently store binary data
841undocumented. I need at least a format for easy reading by humans and a 1175as JSON, at the expense of breaking compatibility with most JSON decoders.
842single-line compact format for use in a protocol, and preferably a way to
843generate ASCII-only JSON texts).
844 1176
845Completely broken (and confusingly documented) Unicode handling (Unicode 1177The main use for C<ascii> is to force the output to not contain characters
846escapes are not working properly, you need to set ImplicitUnicode to 1178with values > 127, which means you can interpret the resulting string
847I<different> values on en- and decoding to get symmetric behaviour). 1179as UTF-8, ISO-8859-1, ASCII, KOI8-R or most about any character set and
848 11808-bit-encoding, and still get the same data structure back. This is useful
849No round-tripping (simple cases work, but this depends on whether the scalar 1181when your channel for JSON transfer is not 8-bit clean or the encoding
850value was used in a numeric context or not). 1182might be mangled in between (e.g. in mail), and works because ASCII is a
851 1183proper subset of most 8-bit and multibyte encodings in use in the world.
852Dumping hashes may skip hash values depending on iterator state.
853
854Unmaintained (maintainer unresponsive for many months, bugs are not
855getting fixed).
856
857Does not check input for validity (i.e. will accept non-JSON input and
858return "something" instead of raising an exception. This is a security
859issue: imagine two banks transferring money between each other using
860JSON. One bank might parse a given non-JSON request and deduct money,
861while the other might reject the transaction with a syntax error. While a
862good protocol will at least recover, that is extra unnecessary work and
863the transaction will still not succeed).
864
865=item JSON::DWIW 0.04
866
867Very fast. Very natural. Very nice.
868
869Undocumented Unicode handling (but the best of the pack. Unicode escapes
870still don't get parsed properly).
871
872Very inflexible.
873
874No round-tripping.
875
876Does not generate valid JSON texts (key strings are often unquoted, empty keys
877result in nothing being output)
878
879Does not check input for validity.
880 1184
881=back 1185=back
882 1186
883 1187
884=head2 JSON and YAML 1188=head2 JSON and YAML
885 1189
886You often hear that JSON is a subset (or a close subset) of YAML. This is, 1190You often hear that JSON is a subset of YAML. This is, however, a mass
887however, a mass hysteria and very far from the truth. In general, there is 1191hysteria(*) and very far from the truth (as of the time of this writing),
888no way to configure JSON::XS to output a data structure as valid YAML. 1192so let me state it clearly: I<in general, there is no way to configure
1193JSON::XS to output a data structure as valid YAML> that works in all
1194cases.
889 1195
890If you really must use JSON::XS to generate YAML, you should use this 1196If you really must use JSON::XS to generate YAML, you should use this
891algorithm (subject to change in future versions): 1197algorithm (subject to change in future versions):
892 1198
893 my $to_yaml = JSON::XS->new->utf8->space_after (1); 1199 my $to_yaml = JSON::XS->new->utf8->space_after (1);
894 my $yaml = $to_yaml->encode ($ref) . "\n"; 1200 my $yaml = $to_yaml->encode ($ref) . "\n";
895 1201
896This will usually generate JSON texts that also parse as valid 1202This will I<usually> generate JSON texts that also parse as valid
897YAML. Please note that YAML has hardcoded limits on (simple) object key 1203YAML. Please note that YAML has hardcoded limits on (simple) object key
898lengths that JSON doesn't have, so you should make sure that your hash 1204lengths that JSON doesn't have and also has different and incompatible
1205unicode handling, so you should make sure that your hash keys are
899keys are noticeably shorter than the 1024 characters YAML allows. 1206noticeably shorter than the 1024 "stream characters" YAML allows and that
1207you do not have characters with codepoint values outside the Unicode BMP
1208(basic multilingual page). YAML also does not allow C<\/> sequences in
1209strings (which JSON::XS does not I<currently> generate, but other JSON
1210generators might).
900 1211
901There might be other incompatibilities that I am not aware of. In general 1212There might be other incompatibilities that I am not aware of (or the YAML
1213specification has been changed yet again - it does so quite often). In
902you should not try to generate YAML with a JSON generator or vice versa, 1214general you should not try to generate YAML with a JSON generator or vice
903or try to parse JSON with a YAML parser or vice versa: chances are high 1215versa, or try to parse JSON with a YAML parser or vice versa: chances are
904that you will run into severe interoperability problems. 1216high that you will run into severe interoperability problems when you
1217least expect it.
1218
1219=over 4
1220
1221=item (*)
1222
1223I have been pressured multiple times by Brian Ingerson (one of the
1224authors of the YAML specification) to remove this paragraph, despite him
1225acknowledging that the actual incompatibilities exist. As I was personally
1226bitten by this "JSON is YAML" lie, I refused and said I will continue to
1227educate people about these issues, so others do not run into the same
1228problem again and again. After this, Brian called me a (quote)I<complete
1229and worthless idiot>(unquote).
1230
1231In my opinion, instead of pressuring and insulting people who actually
1232clarify issues with YAML and the wrong statements of some of its
1233proponents, I would kindly suggest reading the JSON spec (which is not
1234that difficult or long) and finally make YAML compatible to it, and
1235educating users about the changes, instead of spreading lies about the
1236real compatibility for many I<years> and trying to silence people who
1237point out that it isn't true.
1238
1239=back
905 1240
906 1241
907=head2 SPEED 1242=head2 SPEED
908 1243
909It seems that JSON::XS is surprisingly fast, as shown in the following 1244It seems that JSON::XS is surprisingly fast, as shown in the following
910tables. They have been generated with the help of the C<eg/bench> program 1245tables. They have been generated with the help of the C<eg/bench> program
911in the JSON::XS distribution, to make it easy to compare on your own 1246in the JSON::XS distribution, to make it easy to compare on your own
912system. 1247system.
913 1248
914First comes a comparison between various modules using a very short 1249First comes a comparison between various modules using
915single-line JSON string: 1250a very short single-line JSON string (also available at
1251L<http://dist.schmorp.de/misc/json/short.json>).
916 1252
917 {"method": "handleMessage", "params": ["user1", "we were just talking"], \ 1253 {"method": "handleMessage", "params": ["user1",
918 "id": null, "array":[1,11,234,-5,1e5,1e7, true, false]} 1254 "we were just talking"], "id": null, "array":[1,11,234,-5,1e5,1e7,
1255 true, false]}
919 1256
920It shows the number of encodes/decodes per second (JSON::XS uses 1257It shows the number of encodes/decodes per second (JSON::XS uses
921the functional interface, while JSON::XS/2 uses the OO interface 1258the functional interface, while JSON::XS/2 uses the OO interface
922with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables 1259with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables
923shrink). Higher is better: 1260shrink). Higher is better:
939about three times faster on decoding, and over forty times faster 1276about three times faster on decoding, and over forty times faster
940than JSON, even with pretty-printing and key sorting. It also compares 1277than JSON, even with pretty-printing and key sorting. It also compares
941favourably to Storable for small amounts of data. 1278favourably to Storable for small amounts of data.
942 1279
943Using a longer test string (roughly 18KB, generated from Yahoo! Locals 1280Using a longer test string (roughly 18KB, generated from Yahoo! Locals
944search API (http://nanoref.com/yahooapis/mgPdGg): 1281search API (L<http://dist.schmorp.de/misc/json/long.json>).
945 1282
946 module | encode | decode | 1283 module | encode | decode |
947 -----------|------------|------------| 1284 -----------|------------|------------|
948 JSON 1.x | 55.260 | 34.971 | 1285 JSON 1.x | 55.260 | 34.971 |
949 JSON::DWIW | 825.228 | 1082.513 | 1286 JSON::DWIW | 825.228 | 1082.513 |
986 1323
987Third, JSON::XS recurses using the C stack when decoding objects and 1324Third, JSON::XS recurses using the C stack when decoding objects and
988arrays. The C stack is a limited resource: for instance, on my amd64 1325arrays. The C stack is a limited resource: for instance, on my amd64
989machine with 8MB of stack size I can decode around 180k nested arrays but 1326machine with 8MB of stack size I can decode around 180k nested arrays but
990only 14k nested JSON objects (due to perl itself recursing deeply on croak 1327only 14k nested JSON objects (due to perl itself recursing deeply on croak
991to free the temporary). If that is exceeded, the program crashes. to be 1328to free the temporary). If that is exceeded, the program crashes. To be
992conservative, the default nesting limit is set to 512. If your process 1329conservative, the default nesting limit is set to 512. If your process
993has a smaller stack, you should adjust this setting accordingly with the 1330has a smaller stack, you should adjust this setting accordingly with the
994C<max_depth> method. 1331C<max_depth> method.
995 1332
996And last but least, something else could bomb you that I forgot to think 1333Something else could bomb you, too, that I forgot to think of. In that
997of. In that case, you get to keep the pieces. I am always open for hints, 1334case, you get to keep the pieces. I am always open for hints, though...
998though... 1335
1336Also keep in mind that JSON::XS might leak contents of your Perl data
1337structures in its error messages, so when you serialise sensitive
1338information you might want to make sure that exceptions thrown by JSON::XS
1339will not end up in front of untrusted eyes.
999 1340
1000If you are using JSON::XS to return packets to consumption 1341If you are using JSON::XS to return packets to consumption
1001by JavaScript scripts in a browser you should have a look at 1342by JavaScript scripts in a browser you should have a look at
1002L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether 1343L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether
1003you are vulnerable to some common attack vectors (which really are browser 1344you are vulnerable to some common attack vectors (which really are browser
1004design bugs, but it is still you who will have to deal with it, as major 1345design bugs, but it is still you who will have to deal with it, as major
1005browser developers care only for features, not about doing security 1346browser developers care only for features, not about getting security
1006right). 1347right).
1007 1348
1008 1349
1009=head1 THREADS 1350=head1 THREADS
1010 1351
1011This module is I<not> guaranteed to be thread safe and there are no 1352This module is I<not> guaranteed to be thread safe and there are no
1012plans to change this until Perl gets thread support (as opposed to the 1353plans to change this until Perl gets thread support (as opposed to the
1013horribly slow so-called "threads" which are simply slow and bloated 1354horribly slow so-called "threads" which are simply slow and bloated
1014process simulations - use fork, its I<much> faster, cheaper, better). 1355process simulations - use fork, it's I<much> faster, cheaper, better).
1015 1356
1016(It might actually work, but you have been warned). 1357(It might actually work, but you have been warned).
1017 1358
1018 1359
1019=head1 BUGS 1360=head1 BUGS
1020 1361
1021While the goal of this module is to be correct, that unfortunately does 1362While the goal of this module is to be correct, that unfortunately does
1022not mean its bug-free, only that I think its design is bug-free. It is 1363not mean it's bug-free, only that I think its design is bug-free. If you
1023still relatively early in its development. If you keep reporting bugs they 1364keep reporting bugs they will be fixed swiftly, though.
1024will be fixed swiftly, though.
1025 1365
1026Please refrain from using rt.cpan.org or any other bug reporting 1366Please refrain from using rt.cpan.org or any other bug reporting
1027service. I put the contact address into my modules for a reason. 1367service. I put the contact address into my modules for a reason.
1028 1368
1029=cut 1369=cut
1049 "--" => sub { $_[0] = ${$_[0]} - 1 }, 1389 "--" => sub { $_[0] = ${$_[0]} - 1 },
1050 fallback => 1; 1390 fallback => 1;
1051 1391
10521; 13921;
1053 1393
1394=head1 SEE ALSO
1395
1396The F<json_xs> command line utility for quick experiments.
1397
1054=head1 AUTHOR 1398=head1 AUTHOR
1055 1399
1056 Marc Lehmann <schmorp@schmorp.de> 1400 Marc Lehmann <schmorp@schmorp.de>
1057 http://home.schmorp.de/ 1401 http://home.schmorp.de/
1058 1402

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines