ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/JSON-XS/XS.pm
(Generate patch)

Comparing JSON-XS/XS.pm (file contents):
Revision 1.16 by root, Sat Mar 24 02:23:51 2007 UTC vs.
Revision 1.140 by root, Thu Jun 27 11:45:17 2013 UTC

1=head1 NAME 1=head1 NAME
2 2
3JSON::XS - JSON serialising/deserialising, done correctly and fast 3JSON::XS - JSON serialising/deserialising, done correctly and fast
4 4
5=encoding utf-8
6
7JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ
8 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html)
9
5=head1 SYNOPSIS 10=head1 SYNOPSIS
6 11
7 use JSON::XS; 12 use JSON::XS;
8 13
9 # exported functions, croak on error 14 # exported functions, they croak on error
15 # and expect/generate UTF-8
10 16
11 $utf8_encoded_json_text = to_json $perl_hash_or_arrayref; 17 $utf8_encoded_json_text = encode_json $perl_hash_or_arrayref;
12 $perl_hash_or_arrayref = from_json $utf8_encoded_json_text; 18 $perl_hash_or_arrayref = decode_json $utf8_encoded_json_text;
13 19
14 # oo-interface 20 # OO-interface
15 21
16 $coder = JSON::XS->new->ascii->pretty->allow_nonref; 22 $coder = JSON::XS->new->ascii->pretty->allow_nonref;
17 $pretty_printed_unencoded = $coder->encode ($perl_scalar); 23 $pretty_printed_unencoded = $coder->encode ($perl_scalar);
18 $perl_scalar = $coder->decode ($unicode_json_text); 24 $perl_scalar = $coder->decode ($unicode_json_text);
19 25
26 # Note that JSON version 2.0 and above will automatically use JSON::XS
27 # if available, at virtually no speed overhead either, so you should
28 # be able to just:
29
30 use JSON;
31
32 # and do the same things, except that you have a pure-perl fallback now.
33
20=head1 DESCRIPTION 34=head1 DESCRIPTION
21 35
22This module converts Perl data structures to JSON and vice versa. Its 36This module converts Perl data structures to JSON and vice versa. Its
23primary goal is to be I<correct> and its secondary goal is to be 37primary goal is to be I<correct> and its secondary goal is to be
24I<fast>. To reach the latter goal it was written in C. 38I<fast>. To reach the latter goal it was written in C.
39
40Beginning with version 2.0 of the JSON module, when both JSON and
41JSON::XS are installed, then JSON will fall back on JSON::XS (this can be
42overridden) with no overhead due to emulation (by inheriting constructor
43and methods). If JSON::XS is not available, it will fall back to the
44compatible JSON::PP module as backend, so using JSON instead of JSON::XS
45gives you a portable JSON API that can be fast when you need and doesn't
46require a C compiler when that is a problem.
25 47
26As this is the n-th-something JSON module on CPAN, what was the reason 48As this is the n-th-something JSON module on CPAN, what was the reason
27to write yet another JSON module? While it seems there are many JSON 49to write yet another JSON module? While it seems there are many JSON
28modules, none of them correctly handle all corner cases, and in most cases 50modules, none of them correctly handle all corner cases, and in most cases
29their maintainers are unresponsive, gone missing, or not listening to bug 51their maintainers are unresponsive, gone missing, or not listening to bug
30reports for other reasons. 52reports for other reasons.
31 53
32See COMPARISON, below, for a comparison to some other JSON modules.
33
34See MAPPING, below, on how JSON::XS maps perl values to JSON values and 54See MAPPING, below, on how JSON::XS maps perl values to JSON values and
35vice versa. 55vice versa.
36 56
37=head2 FEATURES 57=head2 FEATURES
38 58
39=over 4 59=over 4
40 60
41=item * correct handling of unicode issues 61=item * correct Unicode handling
42 62
43This module knows how to handle Unicode, and even documents how and when 63This module knows how to handle Unicode, documents how and when it does
44it does so. 64so, and even documents what "correct" means.
45 65
46=item * round-trip integrity 66=item * round-trip integrity
47 67
48When you serialise a perl data structure using only datatypes supported 68When you serialise a perl data structure using only data types supported
49by JSON, the deserialised data structure is identical on the Perl level. 69by JSON and Perl, the deserialised data structure is identical on the Perl
50(e.g. the string "2.0" doesn't suddenly become "2"). 70level. (e.g. the string "2.0" doesn't suddenly become "2" just because
71it looks like a number). There I<are> minor exceptions to this, read the
72MAPPING section below to learn about those.
51 73
52=item * strict checking of JSON correctness 74=item * strict checking of JSON correctness
53 75
54There is no guessing, no generating of illegal JSON texts by default, 76There is no guessing, no generating of illegal JSON texts by default,
55and only JSON is accepted as input by default (the latter is a security 77and only JSON is accepted as input by default (the latter is a security
56feature). 78feature).
57 79
58=item * fast 80=item * fast
59 81
60Compared to other JSON modules, this module compares favourably in terms 82Compared to other JSON modules and other serialisers such as Storable,
61of speed, too. 83this module usually compares favourably in terms of speed, too.
62 84
63=item * simple to use 85=item * simple to use
64 86
65This module has both a simple functional interface as well as an OO 87This module has both a simple functional interface as well as an object
66interface. 88oriented interface.
67 89
68=item * reasonably versatile output formats 90=item * reasonably versatile output formats
69 91
70You can choose between the most compact guarenteed single-line format 92You can choose between the most compact guaranteed-single-line format
71possible (nice for simple line-based protocols), a pure-ascii format (for 93possible (nice for simple line-based protocols), a pure-ASCII format
72when your transport is not 8-bit clean), or a pretty-printed format (for 94(for when your transport is not 8-bit clean, still supports the whole
73when you want to read that stuff). Or you can combine those features in 95Unicode range), or a pretty-printed format (for when you want to read that
74whatever way you like. 96stuff). Or you can combine those features in whatever way you like.
75 97
76=back 98=back
77 99
78=cut 100=cut
79 101
80package JSON::XS; 102package JSON::XS;
81 103
82BEGIN { 104use common::sense;
83 $VERSION = '0.31'; 105
106our $VERSION = 2.34;
84 @ISA = qw(Exporter); 107our @ISA = qw(Exporter);
85 108
86 @EXPORT = qw(to_json from_json); 109our @EXPORT = qw(encode_json decode_json to_json from_json);
87 require Exporter;
88 110
111sub to_json($) {
89 require XSLoader; 112 require Carp;
90 XSLoader::load JSON::XS::, $VERSION; 113 Carp::croak ("JSON::XS::to_json has been renamed to encode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
91} 114}
92 115
116sub from_json($) {
117 require Carp;
118 Carp::croak ("JSON::XS::from_json has been renamed to decode_json, either downgrade to pre-2.0 versions of JSON::XS or rename the call");
119}
120
121use Exporter;
122use XSLoader;
123
93=head1 FUNCTIONAL INTERFACE 124=head1 FUNCTIONAL INTERFACE
94 125
95The following convinience methods are provided by this module. They are 126The following convenience methods are provided by this module. They are
96exported by default: 127exported by default:
97 128
98=over 4 129=over 4
99 130
100=item $json_text = to_json $perl_scalar 131=item $json_text = encode_json $perl_scalar
101 132
102Converts the given Perl data structure (a simple scalar or a reference to 133Converts the given Perl data structure to a UTF-8 encoded, binary string
103a hash or array) to a UTF-8 encoded, binary string (that is, the string contains 134(that is, the string contains octets only). Croaks on error.
104octets only). Croaks on error.
105 135
106This function call is functionally identical to: 136This function call is functionally identical to:
107 137
108 $json_text = JSON::XS->new->utf8->encode ($perl_scalar) 138 $json_text = JSON::XS->new->utf8->encode ($perl_scalar)
109 139
110except being faster. 140Except being faster.
111 141
112=item $perl_scalar = from_json $json_text 142=item $perl_scalar = decode_json $json_text
113 143
114The opposite of C<to_json>: expects an UTF-8 (binary) string and tries to 144The opposite of C<encode_json>: expects an UTF-8 (binary) string and tries
115parse that as an UTF-8 encoded JSON text, returning the resulting simple 145to parse that as an UTF-8 encoded JSON text, returning the resulting
116scalar or reference. Croaks on error. 146reference. Croaks on error.
117 147
118This function call is functionally identical to: 148This function call is functionally identical to:
119 149
120 $perl_scalar = JSON::XS->new->utf8->decode ($json_text) 150 $perl_scalar = JSON::XS->new->utf8->decode ($json_text)
121 151
122except being faster. 152Except being faster.
153
154=item $is_boolean = JSON::XS::is_bool $scalar
155
156Returns true if the passed scalar represents either JSON::XS::true or
157JSON::XS::false, two constants that act like C<1> and C<0>, respectively
158and are used to represent JSON C<true> and C<false> values in Perl.
159
160See MAPPING, below, for more information on how JSON values are mapped to
161Perl.
123 162
124=back 163=back
164
165
166=head1 A FEW NOTES ON UNICODE AND PERL
167
168Since this often leads to confusion, here are a few very clear words on
169how Unicode works in Perl, modulo bugs.
170
171=over 4
172
173=item 1. Perl strings can store characters with ordinal values > 255.
174
175This enables you to store Unicode characters as single characters in a
176Perl string - very natural.
177
178=item 2. Perl does I<not> associate an encoding with your strings.
179
180... until you force it to, e.g. when matching it against a regex, or
181printing the scalar to a file, in which case Perl either interprets your
182string as locale-encoded text, octets/binary, or as Unicode, depending
183on various settings. In no case is an encoding stored together with your
184data, it is I<use> that decides encoding, not any magical meta data.
185
186=item 3. The internal utf-8 flag has no meaning with regards to the
187encoding of your string.
188
189Just ignore that flag unless you debug a Perl bug, a module written in
190XS or want to dive into the internals of perl. Otherwise it will only
191confuse you, as, despite the name, it says nothing about how your string
192is encoded. You can have Unicode strings with that flag set, with that
193flag clear, and you can have binary data with that flag set and that flag
194clear. Other possibilities exist, too.
195
196If you didn't know about that flag, just the better, pretend it doesn't
197exist.
198
199=item 4. A "Unicode String" is simply a string where each character can be
200validly interpreted as a Unicode code point.
201
202If you have UTF-8 encoded data, it is no longer a Unicode string, but a
203Unicode string encoded in UTF-8, giving you a binary string.
204
205=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string.
206
207It's a fact. Learn to live with it.
208
209=back
210
211I hope this helps :)
212
125 213
126=head1 OBJECT-ORIENTED INTERFACE 214=head1 OBJECT-ORIENTED INTERFACE
127 215
128The object oriented interface lets you configure your own encoding or 216The object oriented interface lets you configure your own encoding or
129decoding style, within the limits of supported formats. 217decoding style, within the limits of supported formats.
141 my $json = JSON::XS->new->utf8->space_after->encode ({a => [1,2]}) 229 my $json = JSON::XS->new->utf8->space_after->encode ({a => [1,2]})
142 => {"a": [1, 2]} 230 => {"a": [1, 2]}
143 231
144=item $json = $json->ascii ([$enable]) 232=item $json = $json->ascii ([$enable])
145 233
234=item $enabled = $json->get_ascii
235
146If C<$enable> is true (or missing), then the C<encode> method will not 236If C<$enable> is true (or missing), then the C<encode> method will not
147generate characters outside the code range C<0..127> (which is ASCII). Any 237generate characters outside the code range C<0..127> (which is ASCII). Any
148unicode characters outside that range will be escaped using either a 238Unicode characters outside that range will be escaped using either a
149single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence, 239single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence,
150as per RFC4627. 240as per RFC4627. The resulting encoded JSON text can be treated as a native
241Unicode string, an ascii-encoded, latin1-encoded or UTF-8 encoded string,
242or any other superset of ASCII.
151 243
152If C<$enable> is false, then the C<encode> method will not escape Unicode 244If C<$enable> is false, then the C<encode> method will not escape Unicode
153characters unless required by the JSON syntax. This results in a faster 245characters unless required by the JSON syntax or other flags. This results
154and more compact format. 246in a faster and more compact format.
247
248See also the section I<ENCODING/CODESET FLAG NOTES> later in this
249document.
250
251The main use for this flag is to produce JSON texts that can be
252transmitted over a 7-bit channel, as the encoded JSON texts will not
253contain any 8 bit characters.
155 254
156 JSON::XS->new->ascii (1)->encode ([chr 0x10401]) 255 JSON::XS->new->ascii (1)->encode ([chr 0x10401])
157 => ["\ud801\udc01"] 256 => ["\ud801\udc01"]
158 257
258=item $json = $json->latin1 ([$enable])
259
260=item $enabled = $json->get_latin1
261
262If C<$enable> is true (or missing), then the C<encode> method will encode
263the resulting JSON text as latin1 (or iso-8859-1), escaping any characters
264outside the code range C<0..255>. The resulting string can be treated as a
265latin1-encoded JSON text or a native Unicode string. The C<decode> method
266will not be affected in any way by this flag, as C<decode> by default
267expects Unicode, which is a strict superset of latin1.
268
269If C<$enable> is false, then the C<encode> method will not escape Unicode
270characters unless required by the JSON syntax or other flags.
271
272See also the section I<ENCODING/CODESET FLAG NOTES> later in this
273document.
274
275The main use for this flag is efficiently encoding binary data as JSON
276text, as most octets will not be escaped, resulting in a smaller encoded
277size. The disadvantage is that the resulting JSON text is encoded
278in latin1 (and must correctly be treated as such when storing and
279transferring), a rare encoding for JSON. It is therefore most useful when
280you want to store data structures known to contain binary data efficiently
281in files or databases, not when talking to other JSON encoders/decoders.
282
283 JSON::XS->new->latin1->encode (["\x{89}\x{abc}"]
284 => ["\x{89}\\u0abc"] # (perl syntax, U+abc escaped, U+89 not)
285
159=item $json = $json->utf8 ([$enable]) 286=item $json = $json->utf8 ([$enable])
287
288=item $enabled = $json->get_utf8
160 289
161If C<$enable> is true (or missing), then the C<encode> method will encode 290If C<$enable> is true (or missing), then the C<encode> method will encode
162the JSON result into UTF-8, as required by many protocols, while the 291the JSON result into UTF-8, as required by many protocols, while the
163C<decode> method expects to be handled an UTF-8-encoded string. Please 292C<decode> method expects to be handled an UTF-8-encoded string. Please
164note that UTF-8-encoded strings do not contain any characters outside the 293note that UTF-8-encoded strings do not contain any characters outside the
165range C<0..255>, they are thus useful for bytewise/binary I/O. In future 294range C<0..255>, they are thus useful for bytewise/binary I/O. In future
166versions, enabling this option might enable autodetection of the UTF-16 295versions, enabling this option might enable autodetection of the UTF-16
167and UTF-32 encoding families, as described in RFC4627. 296and UTF-32 encoding families, as described in RFC4627.
168 297
169If C<$enable> is false, then the C<encode> method will return the JSON 298If C<$enable> is false, then the C<encode> method will return the JSON
170string as a (non-encoded) unicode string, while C<decode> expects thus a 299string as a (non-encoded) Unicode string, while C<decode> expects thus a
171unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs 300Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs
172to be done yourself, e.g. using the Encode module. 301to be done yourself, e.g. using the Encode module.
302
303See also the section I<ENCODING/CODESET FLAG NOTES> later in this
304document.
173 305
174Example, output UTF-16BE-encoded JSON: 306Example, output UTF-16BE-encoded JSON:
175 307
176 use Encode; 308 use Encode;
177 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object); 309 $jsontext = encode "UTF-16BE", JSON::XS->new->encode ($object);
198 ] 330 ]
199 } 331 }
200 332
201=item $json = $json->indent ([$enable]) 333=item $json = $json->indent ([$enable])
202 334
335=item $enabled = $json->get_indent
336
203If C<$enable> is true (or missing), then the C<encode> method will use a multiline 337If C<$enable> is true (or missing), then the C<encode> method will use a multiline
204format as output, putting every array member or object/hash key-value pair 338format as output, putting every array member or object/hash key-value pair
205into its own line, identing them properly. 339into its own line, indenting them properly.
206 340
207If C<$enable> is false, no newlines or indenting will be produced, and the 341If C<$enable> is false, no newlines or indenting will be produced, and the
208resulting JSON text is guarenteed not to contain any C<newlines>. 342resulting JSON text is guaranteed not to contain any C<newlines>.
209 343
210This setting has no effect when decoding JSON texts. 344This setting has no effect when decoding JSON texts.
211 345
212=item $json = $json->space_before ([$enable]) 346=item $json = $json->space_before ([$enable])
347
348=item $enabled = $json->get_space_before
213 349
214If C<$enable> is true (or missing), then the C<encode> method will add an extra 350If C<$enable> is true (or missing), then the C<encode> method will add an extra
215optional space before the C<:> separating keys from values in JSON objects. 351optional space before the C<:> separating keys from values in JSON objects.
216 352
217If C<$enable> is false, then the C<encode> method will not add any extra 353If C<$enable> is false, then the C<encode> method will not add any extra
223Example, space_before enabled, space_after and indent disabled: 359Example, space_before enabled, space_after and indent disabled:
224 360
225 {"key" :"value"} 361 {"key" :"value"}
226 362
227=item $json = $json->space_after ([$enable]) 363=item $json = $json->space_after ([$enable])
364
365=item $enabled = $json->get_space_after
228 366
229If C<$enable> is true (or missing), then the C<encode> method will add an extra 367If C<$enable> is true (or missing), then the C<encode> method will add an extra
230optional space after the C<:> separating keys from values in JSON objects 368optional space after the C<:> separating keys from values in JSON objects
231and extra whitespace after the C<,> separating key-value pairs and array 369and extra whitespace after the C<,> separating key-value pairs and array
232members. 370members.
238 376
239Example, space_before and indent disabled, space_after enabled: 377Example, space_before and indent disabled, space_after enabled:
240 378
241 {"key": "value"} 379 {"key": "value"}
242 380
381=item $json = $json->relaxed ([$enable])
382
383=item $enabled = $json->get_relaxed
384
385If C<$enable> is true (or missing), then C<decode> will accept some
386extensions to normal JSON syntax (see below). C<encode> will not be
387affected in anyway. I<Be aware that this option makes you accept invalid
388JSON texts as if they were valid!>. I suggest only to use this option to
389parse application-specific files written by humans (configuration files,
390resource files etc.)
391
392If C<$enable> is false (the default), then C<decode> will only accept
393valid JSON texts.
394
395Currently accepted extensions are:
396
397=over 4
398
399=item * list items can have an end-comma
400
401JSON I<separates> array elements and key-value pairs with commas. This
402can be annoying if you write JSON texts manually and want to be able to
403quickly append elements, so this extension accepts comma at the end of
404such items not just between them:
405
406 [
407 1,
408 2, <- this comma not normally allowed
409 ]
410 {
411 "k1": "v1",
412 "k2": "v2", <- this comma not normally allowed
413 }
414
415=item * shell-style '#'-comments
416
417Whenever JSON allows whitespace, shell-style comments are additionally
418allowed. They are terminated by the first carriage-return or line-feed
419character, after which more white-space and comments are allowed.
420
421 [
422 1, # this comment not allowed in JSON
423 # neither this one...
424 ]
425
426=back
427
243=item $json = $json->canonical ([$enable]) 428=item $json = $json->canonical ([$enable])
429
430=item $enabled = $json->get_canonical
244 431
245If C<$enable> is true (or missing), then the C<encode> method will output JSON objects 432If C<$enable> is true (or missing), then the C<encode> method will output JSON objects
246by sorting their keys. This is adding a comparatively high overhead. 433by sorting their keys. This is adding a comparatively high overhead.
247 434
248If C<$enable> is false, then the C<encode> method will output key-value 435If C<$enable> is false, then the C<encode> method will output key-value
249pairs in the order Perl stores them (which will likely change between runs 436pairs in the order Perl stores them (which will likely change between runs
250of the same script). 437of the same script, and can change even within the same run from 5.18
438onwards).
251 439
252This option is useful if you want the same data structure to be encoded as 440This option is useful if you want the same data structure to be encoded as
253the same JSON text (given the same overall settings). If it is disabled, 441the same JSON text (given the same overall settings). If it is disabled,
254the same hash migh be encoded differently even if contains the same data, 442the same hash might be encoded differently even if contains the same data,
255as key-value pairs have no inherent ordering in Perl. 443as key-value pairs have no inherent ordering in Perl.
256 444
257This setting has no effect when decoding JSON texts. 445This setting has no effect when decoding JSON texts.
258 446
447This setting has currently no effect on tied hashes.
448
259=item $json = $json->allow_nonref ([$enable]) 449=item $json = $json->allow_nonref ([$enable])
450
451=item $enabled = $json->get_allow_nonref
260 452
261If C<$enable> is true (or missing), then the C<encode> method can convert a 453If C<$enable> is true (or missing), then the C<encode> method can convert a
262non-reference into its corresponding string, number or null JSON value, 454non-reference into its corresponding string, number or null JSON value,
263which is an extension to RFC4627. Likewise, C<decode> will accept those JSON 455which is an extension to RFC4627. Likewise, C<decode> will accept those JSON
264values instead of croaking. 456values instead of croaking.
272resulting in an invalid JSON text: 464resulting in an invalid JSON text:
273 465
274 JSON::XS->new->allow_nonref->encode ("Hello, World!") 466 JSON::XS->new->allow_nonref->encode ("Hello, World!")
275 => "Hello, World!" 467 => "Hello, World!"
276 468
469=item $json = $json->allow_unknown ([$enable])
470
471=item $enabled = $json->get_allow_unknown
472
473If C<$enable> is true (or missing), then C<encode> will I<not> throw an
474exception when it encounters values it cannot represent in JSON (for
475example, filehandles) but instead will encode a JSON C<null> value. Note
476that blessed objects are not included here and are handled separately by
477c<allow_nonref>.
478
479If C<$enable> is false (the default), then C<encode> will throw an
480exception when it encounters anything it cannot encode as JSON.
481
482This option does not affect C<decode> in any way, and it is recommended to
483leave it off unless you know your communications partner.
484
485=item $json = $json->allow_blessed ([$enable])
486
487=item $enabled = $json->get_allow_blessed
488
489If C<$enable> is true (or missing), then the C<encode> method will not
490barf when it encounters a blessed reference. Instead, the value of the
491B<convert_blessed> option will decide whether C<null> (C<convert_blessed>
492disabled or no C<TO_JSON> method found) or a representation of the
493object (C<convert_blessed> enabled and C<TO_JSON> method found) is being
494encoded. Has no effect on C<decode>.
495
496If C<$enable> is false (the default), then C<encode> will throw an
497exception when it encounters a blessed object.
498
499=item $json = $json->convert_blessed ([$enable])
500
501=item $enabled = $json->get_convert_blessed
502
503If C<$enable> is true (or missing), then C<encode>, upon encountering a
504blessed object, will check for the availability of the C<TO_JSON> method
505on the object's class. If found, it will be called in scalar context
506and the resulting scalar will be encoded instead of the object. If no
507C<TO_JSON> method is found, the value of C<allow_blessed> will decide what
508to do.
509
510The C<TO_JSON> method may safely call die if it wants. If C<TO_JSON>
511returns other blessed objects, those will be handled in the same
512way. C<TO_JSON> must take care of not causing an endless recursion cycle
513(== crash) in this case. The name of C<TO_JSON> was chosen because other
514methods called by the Perl core (== not by the user of the object) are
515usually in upper case letters and to avoid collisions with any C<to_json>
516function or method.
517
518This setting does not yet influence C<decode> in any way, but in the
519future, global hooks might get installed that influence C<decode> and are
520enabled by this setting.
521
522If C<$enable> is false, then the C<allow_blessed> setting will decide what
523to do when a blessed object is found.
524
525=item $json = $json->filter_json_object ([$coderef->($hashref)])
526
527When C<$coderef> is specified, it will be called from C<decode> each
528time it decodes a JSON object. The only argument is a reference to the
529newly-created hash. If the code references returns a single scalar (which
530need not be a reference), this value (i.e. a copy of that scalar to avoid
531aliasing) is inserted into the deserialised data structure. If it returns
532an empty list (NOTE: I<not> C<undef>, which is a valid scalar), the
533original deserialised hash will be inserted. This setting can slow down
534decoding considerably.
535
536When C<$coderef> is omitted or undefined, any existing callback will
537be removed and C<decode> will not change the deserialised hash in any
538way.
539
540Example, convert all JSON objects into the integer 5:
541
542 my $js = JSON::XS->new->filter_json_object (sub { 5 });
543 # returns [5]
544 $js->decode ('[{}]')
545 # throw an exception because allow_nonref is not enabled
546 # so a lone 5 is not allowed.
547 $js->decode ('{"a":1, "b":2}');
548
549=item $json = $json->filter_json_single_key_object ($key [=> $coderef->($value)])
550
551Works remotely similar to C<filter_json_object>, but is only called for
552JSON objects having a single key named C<$key>.
553
554This C<$coderef> is called before the one specified via
555C<filter_json_object>, if any. It gets passed the single value in the JSON
556object. If it returns a single value, it will be inserted into the data
557structure. If it returns nothing (not even C<undef> but the empty list),
558the callback from C<filter_json_object> will be called next, as if no
559single-key callback were specified.
560
561If C<$coderef> is omitted or undefined, the corresponding callback will be
562disabled. There can only ever be one callback for a given key.
563
564As this callback gets called less often then the C<filter_json_object>
565one, decoding speed will not usually suffer as much. Therefore, single-key
566objects make excellent targets to serialise Perl objects into, especially
567as single-key JSON objects are as close to the type-tagged value concept
568as JSON gets (it's basically an ID/VALUE tuple). Of course, JSON does not
569support this in any way, so you need to make sure your data never looks
570like a serialised Perl hash.
571
572Typical names for the single object key are C<__class_whatever__>, or
573C<$__dollars_are_rarely_used__$> or C<}ugly_brace_placement>, or even
574things like C<__class_md5sum(classname)__>, to reduce the risk of clashing
575with real hashes.
576
577Example, decode JSON objects of the form C<< { "__widget__" => <id> } >>
578into the corresponding C<< $WIDGET{<id>} >> object:
579
580 # return whatever is in $WIDGET{5}:
581 JSON::XS
582 ->new
583 ->filter_json_single_key_object (__widget__ => sub {
584 $WIDGET{ $_[0] }
585 })
586 ->decode ('{"__widget__": 5')
587
588 # this can be used with a TO_JSON method in some "widget" class
589 # for serialisation to json:
590 sub WidgetBase::TO_JSON {
591 my ($self) = @_;
592
593 unless ($self->{id}) {
594 $self->{id} = ..get..some..id..;
595 $WIDGET{$self->{id}} = $self;
596 }
597
598 { __widget__ => $self->{id} }
599 }
600
277=item $json = $json->shrink ([$enable]) 601=item $json = $json->shrink ([$enable])
278 602
603=item $enabled = $json->get_shrink
604
279Perl usually over-allocates memory a bit when allocating space for 605Perl usually over-allocates memory a bit when allocating space for
280strings. This flag optionally resizes strings generated by either 606strings. This flag optionally resizes strings generated by either
281C<encode> or C<decode> to their minimum size possible. This can save 607C<encode> or C<decode> to their minimum size possible. This can save
282memory when your JSON texts are either very very long or you have many 608memory when your JSON texts are either very very long or you have many
283short strings. It will also try to downgrade any strings to octet-form 609short strings. It will also try to downgrade any strings to octet-form
284if possible: perl stores strings internally either in an encoding called 610if possible: perl stores strings internally either in an encoding called
285UTF-X or in octet-form. The latter cannot store everything but uses less 611UTF-X or in octet-form. The latter cannot store everything but uses less
286space in general. 612space in general (and some buggy Perl or C code might even rely on that
613internal representation being used).
287 614
615The actual definition of what shrink does might change in future versions,
616but it will always try to save space at the expense of time.
617
288If C<$enable> is true (or missing), the string returned by C<encode> will be shrunk-to-fit, 618If C<$enable> is true (or missing), the string returned by C<encode> will
289while all strings generated by C<decode> will also be shrunk-to-fit. 619be shrunk-to-fit, while all strings generated by C<decode> will also be
620shrunk-to-fit.
290 621
291If C<$enable> is false, then the normal perl allocation algorithms are used. 622If C<$enable> is false, then the normal perl allocation algorithms are used.
292If you work with your data, then this is likely to be faster. 623If you work with your data, then this is likely to be faster.
293 624
294In the future, this setting might control other things, such as converting 625In the future, this setting might control other things, such as converting
295strings that look like integers or floats into integers or floats 626strings that look like integers or floats into integers or floats
296internally (there is no difference on the Perl level), saving space. 627internally (there is no difference on the Perl level), saving space.
628
629=item $json = $json->max_depth ([$maximum_nesting_depth])
630
631=item $max_depth = $json->get_max_depth
632
633Sets the maximum nesting level (default C<512>) accepted while encoding
634or decoding. If a higher nesting level is detected in JSON text or a Perl
635data structure, then the encoder and decoder will stop and croak at that
636point.
637
638Nesting level is defined by number of hash- or arrayrefs that the encoder
639needs to traverse to reach a given point or the number of C<{> or C<[>
640characters without their matching closing parenthesis crossed to reach a
641given character in a string.
642
643Setting the maximum depth to one disallows any nesting, so that ensures
644that the object is only a single hash/object or array.
645
646If no argument is given, the highest possible setting will be used, which
647is rarely useful.
648
649Note that nesting is implemented by recursion in C. The default value has
650been chosen to be as large as typical operating systems allow without
651crashing.
652
653See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
654
655=item $json = $json->max_size ([$maximum_string_size])
656
657=item $max_size = $json->get_max_size
658
659Set the maximum length a JSON text may have (in bytes) where decoding is
660being attempted. The default is C<0>, meaning no limit. When C<decode>
661is called on a string that is longer then this many bytes, it will not
662attempt to decode the string but throw an exception. This setting has no
663effect on C<encode> (yet).
664
665If no argument is given, the limit check will be deactivated (same as when
666C<0> is specified).
667
668See SECURITY CONSIDERATIONS, below, for more info on why this is useful.
297 669
298=item $json_text = $json->encode ($perl_scalar) 670=item $json_text = $json->encode ($perl_scalar)
299 671
300Converts the given Perl data structure (a simple scalar or a reference 672Converts the given Perl data structure (a simple scalar or a reference
301to a hash or array) to its JSON representation. Simple scalars will be 673to a hash or array) to its JSON representation. Simple scalars will be
311 683
312JSON numbers and strings become simple Perl scalars. JSON arrays become 684JSON numbers and strings become simple Perl scalars. JSON arrays become
313Perl arrayrefs and JSON objects become Perl hashrefs. C<true> becomes 685Perl arrayrefs and JSON objects become Perl hashrefs. C<true> becomes
314C<1>, C<false> becomes C<0> and C<null> becomes C<undef>. 686C<1>, C<false> becomes C<0> and C<null> becomes C<undef>.
315 687
688=item ($perl_scalar, $characters) = $json->decode_prefix ($json_text)
689
690This works like the C<decode> method, but instead of raising an exception
691when there is trailing garbage after the first JSON object, it will
692silently stop parsing there and return the number of characters consumed
693so far.
694
695This is useful if your JSON texts are not delimited by an outer protocol
696(which is not the brightest thing to do in the first place) and you need
697to know where the JSON text ends.
698
699 JSON::XS->new->decode_prefix ("[1] the tail")
700 => ([], 3)
701
316=back 702=back
703
704
705=head1 INCREMENTAL PARSING
706
707In some cases, there is the need for incremental parsing of JSON
708texts. While this module always has to keep both JSON text and resulting
709Perl data structure in memory at one time, it does allow you to parse a
710JSON stream incrementally. It does so by accumulating text until it has
711a full JSON object, which it then can decode. This process is similar to
712using C<decode_prefix> to see if a full JSON object is available, but
713is much more efficient (and can be implemented with a minimum of method
714calls).
715
716JSON::XS will only attempt to parse the JSON text once it is sure it
717has enough text to get a decisive result, using a very simple but
718truly incremental parser. This means that it sometimes won't stop as
719early as the full parser, for example, it doesn't detect mismatched
720parentheses. The only thing it guarantees is that it starts decoding as
721soon as a syntactically valid JSON text has been seen. This means you need
722to set resource limits (e.g. C<max_size>) to ensure the parser will stop
723parsing in the presence if syntax errors.
724
725The following methods implement this incremental parser.
726
727=over 4
728
729=item [void, scalar or list context] = $json->incr_parse ([$string])
730
731This is the central parsing function. It can both append new text and
732extract objects from the stream accumulated so far (both of these
733functions are optional).
734
735If C<$string> is given, then this string is appended to the already
736existing JSON fragment stored in the C<$json> object.
737
738After that, if the function is called in void context, it will simply
739return without doing anything further. This can be used to add more text
740in as many chunks as you want.
741
742If the method is called in scalar context, then it will try to extract
743exactly I<one> JSON object. If that is successful, it will return this
744object, otherwise it will return C<undef>. If there is a parse error,
745this method will croak just as C<decode> would do (one can then use
746C<incr_skip> to skip the erroneous part). This is the most common way of
747using the method.
748
749And finally, in list context, it will try to extract as many objects
750from the stream as it can find and return them, or the empty list
751otherwise. For this to work, there must be no separators between the JSON
752objects or arrays, instead they must be concatenated back-to-back. If
753an error occurs, an exception will be raised as in the scalar context
754case. Note that in this case, any previously-parsed JSON texts will be
755lost.
756
757Example: Parse some JSON arrays/objects in a given string and return
758them.
759
760 my @objs = JSON::XS->new->incr_parse ("[5][7][1,2]");
761
762=item $lvalue_string = $json->incr_text
763
764This method returns the currently stored JSON fragment as an lvalue, that
765is, you can manipulate it. This I<only> works when a preceding call to
766C<incr_parse> in I<scalar context> successfully returned an object. Under
767all other circumstances you must not call this function (I mean it.
768although in simple tests it might actually work, it I<will> fail under
769real world conditions). As a special exception, you can also call this
770method before having parsed anything.
771
772This function is useful in two cases: a) finding the trailing text after a
773JSON object or b) parsing multiple JSON objects separated by non-JSON text
774(such as commas).
775
776=item $json->incr_skip
777
778This will reset the state of the incremental parser and will remove
779the parsed text from the input buffer so far. This is useful after
780C<incr_parse> died, in which case the input buffer and incremental parser
781state is left unchanged, to skip the text parsed so far and to reset the
782parse state.
783
784The difference to C<incr_reset> is that only text until the parse error
785occurred is removed.
786
787=item $json->incr_reset
788
789This completely resets the incremental parser, that is, after this call,
790it will be as if the parser had never parsed anything.
791
792This is useful if you want to repeatedly parse JSON objects and want to
793ignore any trailing data, which means you have to reset the parser after
794each successful decode.
795
796=back
797
798=head2 LIMITATIONS
799
800All options that affect decoding are supported, except
801C<allow_nonref>. The reason for this is that it cannot be made to
802work sensibly: JSON objects and arrays are self-delimited, i.e. you can concatenate
803them back to back and still decode them perfectly. This does not hold true
804for JSON numbers, however.
805
806For example, is the string C<1> a single JSON number, or is it simply the
807start of C<12>? Or is C<12> a single JSON number, or the concatenation
808of C<1> and C<2>? In neither case you can tell, and this is why JSON::XS
809takes the conservative route and disallows this case.
810
811=head2 EXAMPLES
812
813Some examples will make all this clearer. First, a simple example that
814works similarly to C<decode_prefix>: We want to decode the JSON object at
815the start of a string and identify the portion after the JSON object:
816
817 my $text = "[1,2,3] hello";
818
819 my $json = new JSON::XS;
820
821 my $obj = $json->incr_parse ($text)
822 or die "expected JSON object or array at beginning of string";
823
824 my $tail = $json->incr_text;
825 # $tail now contains " hello"
826
827Easy, isn't it?
828
829Now for a more complicated example: Imagine a hypothetical protocol where
830you read some requests from a TCP stream, and each request is a JSON
831array, without any separation between them (in fact, it is often useful to
832use newlines as "separators", as these get interpreted as whitespace at
833the start of the JSON text, which makes it possible to test said protocol
834with C<telnet>...).
835
836Here is how you'd do it (it is trivial to write this in an event-based
837manner):
838
839 my $json = new JSON::XS;
840
841 # read some data from the socket
842 while (sysread $socket, my $buf, 4096) {
843
844 # split and decode as many requests as possible
845 for my $request ($json->incr_parse ($buf)) {
846 # act on the $request
847 }
848 }
849
850Another complicated example: Assume you have a string with JSON objects
851or arrays, all separated by (optional) comma characters (e.g. C<[1],[2],
852[3]>). To parse them, we have to skip the commas between the JSON texts,
853and here is where the lvalue-ness of C<incr_text> comes in useful:
854
855 my $text = "[1],[2], [3]";
856 my $json = new JSON::XS;
857
858 # void context, so no parsing done
859 $json->incr_parse ($text);
860
861 # now extract as many objects as possible. note the
862 # use of scalar context so incr_text can be called.
863 while (my $obj = $json->incr_parse) {
864 # do something with $obj
865
866 # now skip the optional comma
867 $json->incr_text =~ s/^ \s* , //x;
868 }
869
870Now lets go for a very complex example: Assume that you have a gigantic
871JSON array-of-objects, many gigabytes in size, and you want to parse it,
872but you cannot load it into memory fully (this has actually happened in
873the real world :).
874
875Well, you lost, you have to implement your own JSON parser. But JSON::XS
876can still help you: You implement a (very simple) array parser and let
877JSON decode the array elements, which are all full JSON objects on their
878own (this wouldn't work if the array elements could be JSON numbers, for
879example):
880
881 my $json = new JSON::XS;
882
883 # open the monster
884 open my $fh, "<bigfile.json"
885 or die "bigfile: $!";
886
887 # first parse the initial "["
888 for (;;) {
889 sysread $fh, my $buf, 65536
890 or die "read error: $!";
891 $json->incr_parse ($buf); # void context, so no parsing
892
893 # Exit the loop once we found and removed(!) the initial "[".
894 # In essence, we are (ab-)using the $json object as a simple scalar
895 # we append data to.
896 last if $json->incr_text =~ s/^ \s* \[ //x;
897 }
898
899 # now we have the skipped the initial "[", so continue
900 # parsing all the elements.
901 for (;;) {
902 # in this loop we read data until we got a single JSON object
903 for (;;) {
904 if (my $obj = $json->incr_parse) {
905 # do something with $obj
906 last;
907 }
908
909 # add more data
910 sysread $fh, my $buf, 65536
911 or die "read error: $!";
912 $json->incr_parse ($buf); # void context, so no parsing
913 }
914
915 # in this loop we read data until we either found and parsed the
916 # separating "," between elements, or the final "]"
917 for (;;) {
918 # first skip whitespace
919 $json->incr_text =~ s/^\s*//;
920
921 # if we find "]", we are done
922 if ($json->incr_text =~ s/^\]//) {
923 print "finished.\n";
924 exit;
925 }
926
927 # if we find ",", we can continue with the next element
928 if ($json->incr_text =~ s/^,//) {
929 last;
930 }
931
932 # if we find anything else, we have a parse error!
933 if (length $json->incr_text) {
934 die "parse error near ", $json->incr_text;
935 }
936
937 # else add more data
938 sysread $fh, my $buf, 65536
939 or die "read error: $!";
940 $json->incr_parse ($buf); # void context, so no parsing
941 }
942
943This is a complex example, but most of the complexity comes from the fact
944that we are trying to be correct (bear with me if I am wrong, I never ran
945the above example :).
946
947
317 948
318=head1 MAPPING 949=head1 MAPPING
319 950
320This section describes how JSON::XS maps Perl values to JSON values and 951This section describes how JSON::XS maps Perl values to JSON values and
321vice versa. These mappings are designed to "do the right thing" in most 952vice versa. These mappings are designed to "do the right thing" in most
322circumstances automatically, preserving round-tripping characteristics 953circumstances automatically, preserving round-tripping characteristics
323(what you put in comes out as something equivalent). 954(what you put in comes out as something equivalent).
324 955
325For the more enlightened: note that in the following descriptions, 956For the more enlightened: note that in the following descriptions,
326lowercase I<perl> refers to the Perl interpreter, while uppcercase I<Perl> 957lowercase I<perl> refers to the Perl interpreter, while uppercase I<Perl>
327refers to the abstract Perl language itself. 958refers to the abstract Perl language itself.
328 959
960
329=head2 JSON -> PERL 961=head2 JSON -> PERL
330 962
331=over 4 963=over 4
332 964
333=item object 965=item object
334 966
335A JSON object becomes a reference to a hash in Perl. No ordering of object 967A JSON object becomes a reference to a hash in Perl. No ordering of object
336keys is preserved (JSON does not preserver object key ordering itself). 968keys is preserved (JSON does not preserve object key ordering itself).
337 969
338=item array 970=item array
339 971
340A JSON array becomes a reference to an array in Perl. 972A JSON array becomes a reference to an array in Perl.
341 973
345are represented by the same codepoints in the Perl string, so no manual 977are represented by the same codepoints in the Perl string, so no manual
346decoding is necessary. 978decoding is necessary.
347 979
348=item number 980=item number
349 981
350A JSON number becomes either an integer or numeric (floating point) 982A JSON number becomes either an integer, numeric (floating point) or
351scalar in perl, depending on its range and any fractional parts. On the 983string scalar in perl, depending on its range and any fractional parts. On
352Perl level, there is no difference between those as Perl handles all the 984the Perl level, there is no difference between those as Perl handles all
353conversion details, but an integer may take slightly less memory and might 985the conversion details, but an integer may take slightly less memory and
354represent more values exactly than (floating point) numbers. 986might represent more values exactly than floating point numbers.
987
988If the number consists of digits only, JSON::XS will try to represent
989it as an integer value. If that fails, it will try to represent it as
990a numeric (floating point) value if that is possible without loss of
991precision. Otherwise it will preserve the number as a string value (in
992which case you lose roundtripping ability, as the JSON number will be
993re-encoded to a JSON string).
994
995Numbers containing a fractional or exponential part will always be
996represented as numeric (floating point) values, possibly at a loss of
997precision (in which case you might lose perfect roundtripping ability, but
998the JSON number will still be re-encoded as a JSON number).
999
1000Note that precision is not accuracy - binary floating point values cannot
1001represent most decimal fractions exactly, and when converting from and to
1002floating point, JSON::XS only guarantees precision up to but not including
1003the least significant bit.
355 1004
356=item true, false 1005=item true, false
357 1006
358These JSON atoms become C<0>, C<1>, respectively. Information is lost in 1007These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>,
359this process. Future versions might represent those values differently, 1008respectively. They are overloaded to act almost exactly like the numbers
360but they will be guarenteed to act like these integers would normally in 1009C<1> and C<0>. You can check whether a scalar is a JSON boolean by using
361Perl. 1010the C<JSON::XS::is_bool> function.
362 1011
363=item null 1012=item null
364 1013
365A JSON null atom becomes C<undef> in Perl. 1014A JSON null atom becomes C<undef> in Perl.
366 1015
367=back 1016=back
1017
368 1018
369=head2 PERL -> JSON 1019=head2 PERL -> JSON
370 1020
371The mapping from Perl to JSON is slightly more difficult, as Perl is a 1021The mapping from Perl to JSON is slightly more difficult, as Perl is a
372truly typeless language, so we can only guess which JSON type is meant by 1022truly typeless language, so we can only guess which JSON type is meant by
375=over 4 1025=over 4
376 1026
377=item hash references 1027=item hash references
378 1028
379Perl hash references become JSON objects. As there is no inherent ordering 1029Perl hash references become JSON objects. As there is no inherent ordering
380in hash keys, they will usually be encoded in a pseudo-random order that 1030in hash keys (or JSON objects), they will usually be encoded in a
381can change between runs of the same program but stays generally the same 1031pseudo-random order that can change between runs of the same program but
382within a single run of a program. JSON::XS can optionally sort the hash 1032stays generally the same within a single run of a program. JSON::XS can
383keys (determined by the I<canonical> flag), so the same datastructure 1033optionally sort the hash keys (determined by the I<canonical> flag), so
384will serialise to the same JSON text (given same settings and version of 1034the same datastructure will serialise to the same JSON text (given same
385JSON::XS), but this incurs a runtime overhead. 1035settings and version of JSON::XS), but this incurs a runtime overhead
1036and is only rarely useful, e.g. when you want to compare some JSON text
1037against another for equality.
386 1038
387=item array references 1039=item array references
388 1040
389Perl array references become JSON arrays. 1041Perl array references become JSON arrays.
390 1042
1043=item other references
1044
1045Other unblessed references are generally not allowed and will cause an
1046exception to be thrown, except for references to the integers C<0> and
1047C<1>, which get turned into C<false> and C<true> atoms in JSON. You can
1048also use C<JSON::XS::false> and C<JSON::XS::true> to improve readability.
1049
1050 encode_json [\0, JSON::XS::true] # yields [false,true]
1051
1052=item JSON::XS::true, JSON::XS::false
1053
1054These special values become JSON true and JSON false values,
1055respectively. You can also use C<\1> and C<\0> directly if you want.
1056
391=item blessed objects 1057=item blessed objects
392 1058
393Blessed objects are not allowed. JSON::XS currently tries to encode their 1059Blessed objects are not directly representable in JSON. See the
394underlying representation (hash- or arrayref), but this behaviour might 1060C<allow_blessed> and C<convert_blessed> methods on various options on
395change in future versions. 1061how to deal with this: basically, you can choose between throwing an
1062exception, encoding the reference as if it weren't blessed, or provide
1063your own serialiser method.
396 1064
397=item simple scalars 1065=item simple scalars
398 1066
399Simple Perl scalars (any scalar that is not a reference) are the most 1067Simple Perl scalars (any scalar that is not a reference) are the most
400difficult objects to encode: JSON::XS will encode undefined scalars as 1068difficult objects to encode: JSON::XS will encode undefined scalars as
401JSON null value, scalars that have last been used in a string context 1069JSON C<null> values, scalars that have last been used in a string context
402before encoding as JSON strings and anything else as number value: 1070before encoding as JSON strings, and anything else as number value:
403 1071
404 # dump as number 1072 # dump as number
405 to_json [2] # yields [2] 1073 encode_json [2] # yields [2]
406 to_json [-3.0e17] # yields [-3e+17] 1074 encode_json [-3.0e17] # yields [-3e+17]
407 my $value = 5; to_json [$value] # yields [5] 1075 my $value = 5; encode_json [$value] # yields [5]
408 1076
409 # used as string, so dump as string 1077 # used as string, so dump as string
410 print $value; 1078 print $value;
411 to_json [$value] # yields ["5"] 1079 encode_json [$value] # yields ["5"]
412 1080
413 # undef becomes null 1081 # undef becomes null
414 to_json [undef] # yields [null] 1082 encode_json [undef] # yields [null]
415 1083
416You can force the type to be a string by stringifying it: 1084You can force the type to be a JSON string by stringifying it:
417 1085
418 my $x = 3.1; # some variable containing a number 1086 my $x = 3.1; # some variable containing a number
419 "$x"; # stringified 1087 "$x"; # stringified
420 $x .= ""; # another, more awkward way to stringify 1088 $x .= ""; # another, more awkward way to stringify
421 print $x; # perl does it for you, too, quite often 1089 print $x; # perl does it for you, too, quite often
422 1090
423You can force the type to be a number by numifying it: 1091You can force the type to be a JSON number by numifying it:
424 1092
425 my $x = "3"; # some variable containing a string 1093 my $x = "3"; # some variable containing a string
426 $x += 0; # numify it, ensuring it will be dumped as a number 1094 $x += 0; # numify it, ensuring it will be dumped as a number
427 $x *= 1; # same thing, the choise is yours. 1095 $x *= 1; # same thing, the choice is yours.
428 1096
429You can not currently output JSON booleans or force the type in other, 1097You can not currently force the type in other, less obscure, ways. Tell me
430less obscure, ways. Tell me if you need this capability. 1098if you need this capability (but don't forget to explain why it's needed
1099:).
431 1100
432=item circular data structures 1101Note that numerical precision has the same meaning as under Perl (so
433 1102binary to decimal conversion follows the same rules as in Perl, which
434Those will be encoded until memory or stackspace runs out. 1103can differ to other languages). Also, your perl interpreter might expose
1104extensions to the floating point numbers of your platform, such as
1105infinities or NaN's - these cannot be represented in JSON, and it is an
1106error to pass those in.
435 1107
436=back 1108=back
437 1109
438=head1 COMPARISON
439 1110
440As already mentioned, this module was created because none of the existing 1111=head1 ENCODING/CODESET FLAG NOTES
441JSON modules could be made to work correctly. First I will describe the 1112
442problems (or pleasures) I encountered with various existing JSON modules, 1113The interested reader might have seen a number of flags that signify
443followed by some benchmark values. JSON::XS was designed not to suffer 1114encodings or codesets - C<utf8>, C<latin1> and C<ascii>. There seems to be
444from any of these problems or limitations. 1115some confusion on what these do, so here is a short comparison:
1116
1117C<utf8> controls whether the JSON text created by C<encode> (and expected
1118by C<decode>) is UTF-8 encoded or not, while C<latin1> and C<ascii> only
1119control whether C<encode> escapes character values outside their respective
1120codeset range. Neither of these flags conflict with each other, although
1121some combinations make less sense than others.
1122
1123Care has been taken to make all flags symmetrical with respect to
1124C<encode> and C<decode>, that is, texts encoded with any combination of
1125these flag values will be correctly decoded when the same flags are used
1126- in general, if you use different flag settings while encoding vs. when
1127decoding you likely have a bug somewhere.
1128
1129Below comes a verbose discussion of these flags. Note that a "codeset" is
1130simply an abstract set of character-codepoint pairs, while an encoding
1131takes those codepoint numbers and I<encodes> them, in our case into
1132octets. Unicode is (among other things) a codeset, UTF-8 is an encoding,
1133and ISO-8859-1 (= latin 1) and ASCII are both codesets I<and> encodings at
1134the same time, which can be confusing.
445 1135
446=over 4 1136=over 4
447 1137
448=item JSON 1.07 1138=item C<utf8> flag disabled
449 1139
450Slow (but very portable, as it is written in pure Perl). 1140When C<utf8> is disabled (the default), then C<encode>/C<decode> generate
1141and expect Unicode strings, that is, characters with high ordinal Unicode
1142values (> 255) will be encoded as such characters, and likewise such
1143characters are decoded as-is, no changes to them will be done, except
1144"(re-)interpreting" them as Unicode codepoints or Unicode characters,
1145respectively (to Perl, these are the same thing in strings unless you do
1146funny/weird/dumb stuff).
451 1147
452Undocumented/buggy Unicode handling (how JSON handles unicode values is 1148This is useful when you want to do the encoding yourself (e.g. when you
453undocumented. One can get far by feeding it unicode strings and doing 1149want to have UTF-16 encoded JSON texts) or when some other layer does
454en-/decoding oneself, but unicode escapes are not working properly). 1150the encoding for you (for example, when printing to a terminal using a
1151filehandle that transparently encodes to UTF-8 you certainly do NOT want
1152to UTF-8 encode your data first and have Perl encode it another time).
455 1153
456No roundtripping (strings get clobbered if they look like numbers, e.g. 1154=item C<utf8> flag enabled
457the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will
458decode into the number 2.
459 1155
460=item JSON::PC 0.01 1156If the C<utf8>-flag is enabled, C<encode>/C<decode> will encode all
1157characters using the corresponding UTF-8 multi-byte sequence, and will
1158expect your input strings to be encoded as UTF-8, that is, no "character"
1159of the input string must have any value > 255, as UTF-8 does not allow
1160that.
461 1161
462Very fast. 1162The C<utf8> flag therefore switches between two modes: disabled means you
1163will get a Unicode string in Perl, enabled means you get an UTF-8 encoded
1164octet/binary string in Perl.
463 1165
464Undocumented/buggy Unicode handling. 1166=item C<latin1> or C<ascii> flags enabled
465 1167
466No roundtripping. 1168With C<latin1> (or C<ascii>) enabled, C<encode> will escape characters
1169with ordinal values > 255 (> 127 with C<ascii>) and encode the remaining
1170characters as specified by the C<utf8> flag.
467 1171
468Has problems handling many Perl values (e.g. regex results and other magic 1172If C<utf8> is disabled, then the result is also correctly encoded in those
469values will make it croak). 1173character sets (as both are proper subsets of Unicode, meaning that a
1174Unicode string with all character values < 256 is the same thing as a
1175ISO-8859-1 string, and a Unicode string with all character values < 128 is
1176the same thing as an ASCII string in Perl).
470 1177
471Does not even generate valid JSON (C<{1,2}> gets converted to C<{1:2}> 1178If C<utf8> is enabled, you still get a correct UTF-8-encoded string,
472which is not a valid JSON text. 1179regardless of these flags, just some more characters will be escaped using
1180C<\uXXXX> then before.
473 1181
474Unmaintained (maintainer unresponsive for many months, bugs are not 1182Note that ISO-8859-1-I<encoded> strings are not compatible with UTF-8
475getting fixed). 1183encoding, while ASCII-encoded strings are. That is because the ISO-8859-1
1184encoding is NOT a subset of UTF-8 (despite the ISO-8859-1 I<codeset> being
1185a subset of Unicode), while ASCII is.
476 1186
477=item JSON::Syck 0.21 1187Surprisingly, C<decode> will ignore these flags and so treat all input
1188values as governed by the C<utf8> flag. If it is disabled, this allows you
1189to decode ISO-8859-1- and ASCII-encoded strings, as both strict subsets of
1190Unicode. If it is enabled, you can correctly decode UTF-8 encoded strings.
478 1191
479Very buggy (often crashes). 1192So neither C<latin1> nor C<ascii> are incompatible with the C<utf8> flag -
1193they only govern when the JSON output engine escapes a character or not.
480 1194
481Very inflexible (no human-readable format supported, format pretty much 1195The main use for C<latin1> is to relatively efficiently store binary data
482undocumented. I need at least a format for easy reading by humans and a 1196as JSON, at the expense of breaking compatibility with most JSON decoders.
483single-line compact format for use in a protocol, and preferably a way to
484generate ASCII-only JSON texts).
485 1197
486Completely broken (and confusingly documented) Unicode handling (unicode 1198The main use for C<ascii> is to force the output to not contain characters
487escapes are not working properly, you need to set ImplicitUnicode to 1199with values > 127, which means you can interpret the resulting string
488I<different> values on en- and decoding to get symmetric behaviour). 1200as UTF-8, ISO-8859-1, ASCII, KOI8-R or most about any character set and
489 12018-bit-encoding, and still get the same data structure back. This is useful
490No roundtripping (simple cases work, but this depends on wether the scalar 1202when your channel for JSON transfer is not 8-bit clean or the encoding
491value was used in a numeric context or not). 1203might be mangled in between (e.g. in mail), and works because ASCII is a
492 1204proper subset of most 8-bit and multibyte encodings in use in the world.
493Dumping hashes may skip hash values depending on iterator state.
494
495Unmaintained (maintainer unresponsive for many months, bugs are not
496getting fixed).
497
498Does not check input for validity (i.e. will accept non-JSON input and
499return "something" instead of raising an exception. This is a security
500issue: imagine two banks transfering money between each other using
501JSON. One bank might parse a given non-JSON request and deduct money,
502while the other might reject the transaction with a syntax error. While a
503good protocol will at least recover, that is extra unnecessary work and
504the transaction will still not succeed).
505
506=item JSON::DWIW 0.04
507
508Very fast. Very natural. Very nice.
509
510Undocumented unicode handling (but the best of the pack. Unicode escapes
511still don't get parsed properly).
512
513Very inflexible.
514
515No roundtripping.
516
517Does not generate valid JSON texts (key strings are often unquoted, empty keys
518result in nothing being output)
519
520Does not check input for validity.
521 1205
522=back 1206=back
1207
1208
1209=head2 JSON and ECMAscript
1210
1211JSON syntax is based on how literals are represented in javascript (the
1212not-standardised predecessor of ECMAscript) which is presumably why it is
1213called "JavaScript Object Notation".
1214
1215However, JSON is not a subset (and also not a superset of course) of
1216ECMAscript (the standard) or javascript (whatever browsers actually
1217implement).
1218
1219If you want to use javascript's C<eval> function to "parse" JSON, you
1220might run into parse errors for valid JSON texts, or the resulting data
1221structure might not be queryable:
1222
1223One of the problems is that U+2028 and U+2029 are valid characters inside
1224JSON strings, but are not allowed in ECMAscript string literals, so the
1225following Perl fragment will not output something that can be guaranteed
1226to be parsable by javascript's C<eval>:
1227
1228 use JSON::XS;
1229
1230 print encode_json [chr 0x2028];
1231
1232The right fix for this is to use a proper JSON parser in your javascript
1233programs, and not rely on C<eval> (see for example Douglas Crockford's
1234F<json2.js> parser).
1235
1236If this is not an option, you can, as a stop-gap measure, simply encode to
1237ASCII-only JSON:
1238
1239 use JSON::XS;
1240
1241 print JSON::XS->new->ascii->encode ([chr 0x2028]);
1242
1243Note that this will enlarge the resulting JSON text quite a bit if you
1244have many non-ASCII characters. You might be tempted to run some regexes
1245to only escape U+2028 and U+2029, e.g.:
1246
1247 # DO NOT USE THIS!
1248 my $json = JSON::XS->new->utf8->encode ([chr 0x2028]);
1249 $json =~ s/\xe2\x80\xa8/\\u2028/g; # escape U+2028
1250 $json =~ s/\xe2\x80\xa9/\\u2029/g; # escape U+2029
1251 print $json;
1252
1253Note that I<this is a bad idea>: the above only works for U+2028 and
1254U+2029 and thus only for fully ECMAscript-compliant parsers. Many existing
1255javascript implementations, however, have issues with other characters as
1256well - using C<eval> naively simply I<will> cause problems.
1257
1258Another problem is that some javascript implementations reserve
1259some property names for their own purposes (which probably makes
1260them non-ECMAscript-compliant). For example, Iceweasel reserves the
1261C<__proto__> property name for its own purposes.
1262
1263If that is a problem, you could parse try to filter the resulting JSON
1264output for these property strings, e.g.:
1265
1266 $json =~ s/"__proto__"\s*:/"__proto__renamed":/g;
1267
1268This works because C<__proto__> is not valid outside of strings, so every
1269occurrence of C<"__proto__"\s*:> must be a string used as property name.
1270
1271If you know of other incompatibilities, please let me know.
1272
1273
1274=head2 JSON and YAML
1275
1276You often hear that JSON is a subset of YAML. This is, however, a mass
1277hysteria(*) and very far from the truth (as of the time of this writing),
1278so let me state it clearly: I<in general, there is no way to configure
1279JSON::XS to output a data structure as valid YAML> that works in all
1280cases.
1281
1282If you really must use JSON::XS to generate YAML, you should use this
1283algorithm (subject to change in future versions):
1284
1285 my $to_yaml = JSON::XS->new->utf8->space_after (1);
1286 my $yaml = $to_yaml->encode ($ref) . "\n";
1287
1288This will I<usually> generate JSON texts that also parse as valid
1289YAML. Please note that YAML has hardcoded limits on (simple) object key
1290lengths that JSON doesn't have and also has different and incompatible
1291unicode character escape syntax, so you should make sure that your hash
1292keys are noticeably shorter than the 1024 "stream characters" YAML allows
1293and that you do not have characters with codepoint values outside the
1294Unicode BMP (basic multilingual page). YAML also does not allow C<\/>
1295sequences in strings (which JSON::XS does not I<currently> generate, but
1296other JSON generators might).
1297
1298There might be other incompatibilities that I am not aware of (or the YAML
1299specification has been changed yet again - it does so quite often). In
1300general you should not try to generate YAML with a JSON generator or vice
1301versa, or try to parse JSON with a YAML parser or vice versa: chances are
1302high that you will run into severe interoperability problems when you
1303least expect it.
1304
1305=over 4
1306
1307=item (*)
1308
1309I have been pressured multiple times by Brian Ingerson (one of the
1310authors of the YAML specification) to remove this paragraph, despite him
1311acknowledging that the actual incompatibilities exist. As I was personally
1312bitten by this "JSON is YAML" lie, I refused and said I will continue to
1313educate people about these issues, so others do not run into the same
1314problem again and again. After this, Brian called me a (quote)I<complete
1315and worthless idiot>(unquote).
1316
1317In my opinion, instead of pressuring and insulting people who actually
1318clarify issues with YAML and the wrong statements of some of its
1319proponents, I would kindly suggest reading the JSON spec (which is not
1320that difficult or long) and finally make YAML compatible to it, and
1321educating users about the changes, instead of spreading lies about the
1322real compatibility for many I<years> and trying to silence people who
1323point out that it isn't true.
1324
1325Addendum/2009: the YAML 1.2 spec is still incompatible with JSON, even
1326though the incompatibilities have been documented (and are known to Brian)
1327for many years and the spec makes explicit claims that YAML is a superset
1328of JSON. It would be so easy to fix, but apparently, bullying people and
1329corrupting userdata is so much easier.
1330
1331=back
1332
523 1333
524=head2 SPEED 1334=head2 SPEED
525 1335
526It seems that JSON::XS is surprisingly fast, as shown in the following 1336It seems that JSON::XS is surprisingly fast, as shown in the following
527tables. They have been generated with the help of the C<eg/bench> program 1337tables. They have been generated with the help of the C<eg/bench> program
528in the JSON::XS distribution, to make it easy to compare on your own 1338in the JSON::XS distribution, to make it easy to compare on your own
529system. 1339system.
530 1340
531First comes a comparison between various modules using a very short JSON 1341First comes a comparison between various modules using
532string (83 bytes), showing the number of encodes/decodes per second 1342a very short single-line JSON string (also available at
1343L<http://dist.schmorp.de/misc/json/short.json>).
1344
1345 {"method": "handleMessage", "params": ["user1",
1346 "we were just talking"], "id": null, "array":[1,11,234,-5,1e5,1e7,
1347 1, 0]}
1348
1349It shows the number of encodes/decodes per second (JSON::XS uses
533(JSON::XS is the functional interface, while JSON::XS/2 is the OO 1350the functional interface, while JSON::XS/2 uses the OO interface
534interface with pretty-printing and hashkey sorting enabled). Higher is 1351with pretty-printing and hashkey sorting enabled, JSON::XS/3 enables
535better: 1352shrink. JSON::DWIW/DS uses the deserialise function, while JSON::DWIW::FJ
1353uses the from_json method). Higher is better:
536 1354
537 module | encode | decode | 1355 module | encode | decode |
538 -----------|------------|------------| 1356 --------------|------------|------------|
539 JSON | 14006 | 6820 | 1357 JSON::DWIW/DS | 86302.551 | 102300.098 |
540 JSON::DWIW | 200937 | 120386 | 1358 JSON::DWIW/FJ | 86302.551 | 75983.768 |
541 JSON::PC | 85065 | 129366 | 1359 JSON::PP | 15827.562 | 6638.658 |
542 JSON::Syck | 59898 | 44232 | 1360 JSON::Syck | 63358.066 | 47662.545 |
543 JSON::XS | 1171478 | 342435 | 1361 JSON::XS | 511500.488 | 511500.488 |
544 JSON::XS/2 | 730760 | 328714 | 1362 JSON::XS/2 | 291271.111 | 388361.481 |
1363 JSON::XS/3 | 361577.931 | 361577.931 |
1364 Storable | 66788.280 | 265462.278 |
545 -----------+------------+------------+ 1365 --------------+------------+------------+
546 1366
547That is, JSON::XS is 6 times faster than than JSON::DWIW and about 80 1367That is, JSON::XS is almost six times faster than JSON::DWIW on encoding,
548times faster than JSON, even with pretty-printing and key sorting. 1368about five times faster on decoding, and over thirty to seventy times
1369faster than JSON's pure perl implementation. It also compares favourably
1370to Storable for small amounts of data.
549 1371
550Using a longer test string (roughly 18KB, generated from Yahoo! Locals 1372Using a longer test string (roughly 18KB, generated from Yahoo! Locals
551search API (http://nanoref.com/yahooapis/mgPdGg): 1373search API (L<http://dist.schmorp.de/misc/json/long.json>).
552 1374
553 module | encode | decode | 1375 module | encode | decode |
554 -----------|------------|------------| 1376 --------------|------------|------------|
555 JSON | 673 | 38 | 1377 JSON::DWIW/DS | 1647.927 | 2673.916 |
556 JSON::DWIW | 5271 | 770 | 1378 JSON::DWIW/FJ | 1630.249 | 2596.128 |
557 JSON::PC | 9901 | 2491 | 1379 JSON::PP | 400.640 | 62.311 |
558 JSON::Syck | 2360 | 786 | 1380 JSON::Syck | 1481.040 | 1524.869 |
559 JSON::XS | 37398 | 3202 | 1381 JSON::XS | 20661.596 | 9541.183 |
560 JSON::XS/2 | 13765 | 3153 | 1382 JSON::XS/2 | 10683.403 | 9416.938 |
1383 JSON::XS/3 | 20661.596 | 9400.054 |
1384 Storable | 19765.806 | 10000.725 |
561 -----------+------------+------------+ 1385 --------------+------------+------------+
562 1386
563Again, JSON::XS leads by far in the encoding case, while still beating 1387Again, JSON::XS leads by far (except for Storable which non-surprisingly
564every other module in the decoding case. 1388decodes a bit faster).
565 1389
566On large strings containing lots of unicode characters, some modules 1390On large strings containing lots of high Unicode characters, some modules
567(such as JSON::PC) decode faster than JSON::XS, but the result will be 1391(such as JSON::PC) seem to decode faster than JSON::XS, but the result
568broken due to missing unicode handling. Others refuse to decode or encode 1392will be broken due to missing (or wrong) Unicode handling. Others refuse
569properly, so it was impossible to prepare a fair comparison table for that 1393to decode or encode properly, so it was impossible to prepare a fair
570case. 1394comparison table for that case.
571 1395
572=head1 RESOURCE LIMITS
573 1396
574JSON::XS does not impose any limits on the size of JSON texts or Perl 1397=head1 SECURITY CONSIDERATIONS
575values they represent - if your machine can handle it, JSON::XS will 1398
576encode or decode it. Future versions might optionally impose structure 1399When you are using JSON in a protocol, talking to untrusted potentially
577depth and memory use resource limits. 1400hostile creatures requires relatively few measures.
1401
1402First of all, your JSON decoder should be secure, that is, should not have
1403any buffer overflows. Obviously, this module should ensure that and I am
1404trying hard on making that true, but you never know.
1405
1406Second, you need to avoid resource-starving attacks. That means you should
1407limit the size of JSON texts you accept, or make sure then when your
1408resources run out, that's just fine (e.g. by using a separate process that
1409can crash safely). The size of a JSON text in octets or characters is
1410usually a good indication of the size of the resources required to decode
1411it into a Perl structure. While JSON::XS can check the size of the JSON
1412text, it might be too late when you already have it in memory, so you
1413might want to check the size before you accept the string.
1414
1415Third, JSON::XS recurses using the C stack when decoding objects and
1416arrays. The C stack is a limited resource: for instance, on my amd64
1417machine with 8MB of stack size I can decode around 180k nested arrays but
1418only 14k nested JSON objects (due to perl itself recursing deeply on croak
1419to free the temporary). If that is exceeded, the program crashes. To be
1420conservative, the default nesting limit is set to 512. If your process
1421has a smaller stack, you should adjust this setting accordingly with the
1422C<max_depth> method.
1423
1424Something else could bomb you, too, that I forgot to think of. In that
1425case, you get to keep the pieces. I am always open for hints, though...
1426
1427Also keep in mind that JSON::XS might leak contents of your Perl data
1428structures in its error messages, so when you serialise sensitive
1429information you might want to make sure that exceptions thrown by JSON::XS
1430will not end up in front of untrusted eyes.
1431
1432If you are using JSON::XS to return packets to consumption
1433by JavaScript scripts in a browser you should have a look at
1434L<http://blog.archive.jpsykes.com/47/practical-csrf-and-json-security/> to
1435see whether you are vulnerable to some common attack vectors (which really
1436are browser design bugs, but it is still you who will have to deal with
1437it, as major browser developers care only for features, not about getting
1438security right).
1439
1440
1441=head1 THREADS
1442
1443This module is I<not> guaranteed to be thread safe and there are no
1444plans to change this until Perl gets thread support (as opposed to the
1445horribly slow so-called "threads" which are simply slow and bloated
1446process simulations - use fork, it's I<much> faster, cheaper, better).
1447
1448(It might actually work, but you have been warned).
1449
1450
1451=head1 THE PERILS OF SETLOCALE
1452
1453Sometimes people avoid the Perl locale support and directly call the
1454system's setlocale function with C<LC_ALL>.
1455
1456This breaks both perl and modules such as JSON::XS, as stringification of
1457numbers no longer works correctly (e.g. C<$x = 0.1; print "$x"+1> might
1458print C<1>, and JSON::XS might output illegal JSON as JSON::XS relies on
1459perl to stringify numbers).
1460
1461The solution is simple: don't call C<setlocale>, or use it for only those
1462categories you need, such as C<LC_MESSAGES> or C<LC_CTYPE>.
1463
1464If you need C<LC_NUMERIC>, you should enable it only around the code that
1465actually needs it (avoiding stringification of numbers), and restore it
1466afterwards.
1467
578 1468
579=head1 BUGS 1469=head1 BUGS
580 1470
581While the goal of this module is to be correct, that unfortunately does 1471While the goal of this module is to be correct, that unfortunately does
582not mean its bug-free, only that I think its design is bug-free. It is 1472not mean it's bug-free, only that I think its design is bug-free. If you
583still very young and not well-tested. If you keep reporting bugs they will 1473keep reporting bugs they will be fixed swiftly, though.
584be fixed swiftly, though. 1474
1475Please refrain from using rt.cpan.org or any other bug reporting
1476service. I put the contact address into my modules for a reason.
585 1477
586=cut 1478=cut
587 1479
1480our $true = do { bless \(my $dummy = 1), "JSON::XS::Boolean" };
1481our $false = do { bless \(my $dummy = 0), "JSON::XS::Boolean" };
1482
1483sub true() { $true }
1484sub false() { $false }
1485
1486sub is_bool($) {
1487 UNIVERSAL::isa $_[0], "JSON::XS::Boolean"
1488# or UNIVERSAL::isa $_[0], "JSON::Literal"
1489}
1490
1491XSLoader::load "JSON::XS", $VERSION;
1492
1493package JSON::XS::Boolean;
1494
1495use overload
1496 "0+" => sub { ${$_[0]} },
1497 "++" => sub { $_[0] = ${$_[0]} + 1 },
1498 "--" => sub { $_[0] = ${$_[0]} - 1 },
1499 fallback => 1;
1500
5881; 15011;
1502
1503=head1 SEE ALSO
1504
1505The F<json_xs> command line utility for quick experiments.
589 1506
590=head1 AUTHOR 1507=head1 AUTHOR
591 1508
592 Marc Lehmann <schmorp@schmorp.de> 1509 Marc Lehmann <schmorp@schmorp.de>
593 http://home.schmorp.de/ 1510 http://home.schmorp.de/

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines