ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/JSON-XS/XS.pm
(Generate patch)

Comparing JSON-XS/XS.pm (file contents):
Revision 1.59 by root, Mon Aug 27 01:49:01 2007 UTC vs.
Revision 1.68 by root, Tue Oct 23 03:30:02 2007 UTC

1=head1 NAME 1=head1 NAME
2 2
3JSON::XS - JSON serialising/deserialising, done correctly and fast 3JSON::XS - JSON serialising/deserialising, done correctly and fast
4
5JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ
6 (http://fleur.hio.jp/perldoc/mix/lib/JSON/XS.html)
4 7
5=head1 SYNOPSIS 8=head1 SYNOPSIS
6 9
7 use JSON::XS; 10 use JSON::XS;
8 11
37 40
38=head2 FEATURES 41=head2 FEATURES
39 42
40=over 4 43=over 4
41 44
42=item * correct unicode handling 45=item * correct Unicode handling
43 46
44This module knows how to handle Unicode, and even documents how and when 47This module knows how to handle Unicode, and even documents how and when
45it does so. 48it does so.
46 49
47=item * round-trip integrity 50=item * round-trip integrity
67This module has both a simple functional interface as well as an OO 70This module has both a simple functional interface as well as an OO
68interface. 71interface.
69 72
70=item * reasonably versatile output formats 73=item * reasonably versatile output formats
71 74
72You can choose between the most compact guarenteed single-line format 75You can choose between the most compact guaranteed single-line format
73possible (nice for simple line-based protocols), a pure-ascii format 76possible (nice for simple line-based protocols), a pure-ascii format
74(for when your transport is not 8-bit clean, still supports the whole 77(for when your transport is not 8-bit clean, still supports the whole
75unicode range), or a pretty-printed format (for when you want to read that 78Unicode range), or a pretty-printed format (for when you want to read that
76stuff). Or you can combine those features in whatever way you like. 79stuff). Or you can combine those features in whatever way you like.
77 80
78=back 81=back
79 82
80=cut 83=cut
81 84
82package JSON::XS; 85package JSON::XS;
83 86
84use strict; 87use strict;
85 88
86our $VERSION = '1.5'; 89our $VERSION = '1.52';
87our @ISA = qw(Exporter); 90our @ISA = qw(Exporter);
88 91
89our @EXPORT = qw(to_json from_json); 92our @EXPORT = qw(to_json from_json);
90 93
91use Exporter; 94use Exporter;
92use XSLoader; 95use XSLoader;
93 96
94=head1 FUNCTIONAL INTERFACE 97=head1 FUNCTIONAL INTERFACE
95 98
96The following convinience methods are provided by this module. They are 99The following convenience methods are provided by this module. They are
97exported by default: 100exported by default:
98 101
99=over 4 102=over 4
100 103
101=item $json_text = to_json $perl_scalar 104=item $json_text = to_json $perl_scalar
102 105
103Converts the given Perl data structure (a simple scalar or a reference to 106Converts the given Perl data structure to a UTF-8 encoded, binary string
104a hash or array) to a UTF-8 encoded, binary string (that is, the string contains 107(that is, the string contains octets only). Croaks on error.
105octets only). Croaks on error.
106 108
107This function call is functionally identical to: 109This function call is functionally identical to:
108 110
109 $json_text = JSON::XS->new->utf8->encode ($perl_scalar) 111 $json_text = JSON::XS->new->utf8->encode ($perl_scalar)
110 112
111except being faster. 113except being faster.
112 114
113=item $perl_scalar = from_json $json_text 115=item $perl_scalar = from_json $json_text
114 116
115The opposite of C<to_json>: expects an UTF-8 (binary) string and tries to 117The opposite of C<to_json>: expects an UTF-8 (binary) string and tries
116parse that as an UTF-8 encoded JSON text, returning the resulting simple 118to parse that as an UTF-8 encoded JSON text, returning the resulting
117scalar or reference. Croaks on error. 119reference. Croaks on error.
118 120
119This function call is functionally identical to: 121This function call is functionally identical to:
120 122
121 $perl_scalar = JSON::XS->new->utf8->decode ($json_text) 123 $perl_scalar = JSON::XS->new->utf8->decode ($json_text)
122 124
132Perl. 134Perl.
133 135
134=back 136=back
135 137
136 138
139=head1 A FEW NOTES ON UNICODE AND PERL
140
141Since this often leads to confusion, here are a few very clear words on
142how Unicode works in Perl, modulo bugs.
143
144=over 4
145
146=item 1. Perl strings can store characters with ordinal values > 255.
147
148This enables you to store Unicode characters as single characters in a
149Perl string - very natural.
150
151=item 2. Perl does I<not> associate an encoding with your strings.
152
153Unless you force it to, e.g. when matching it against a regex, or printing
154the scalar to a file, in which case Perl either interprets your string as
155locale-encoded text, octets/binary, or as Unicode, depending on various
156settings. In no case is an encoding stored together with your data, it is
157I<use> that decides encoding, not any magical metadata.
158
159=item 3. The internal utf-8 flag has no meaning with regards to the
160encoding of your string.
161
162Just ignore that flag unless you debug a Perl bug, a module written in
163XS or want to dive into the internals of perl. Otherwise it will only
164confuse you, as, despite the name, it says nothing about how your string
165is encoded. You can have Unicode strings with that flag set, with that
166flag clear, and you can have binary data with that flag set and that flag
167clear. Other possibilities exist, too.
168
169If you didn't know about that flag, just the better, pretend it doesn't
170exist.
171
172=item 4. A "Unicode String" is simply a string where each character can be
173validly interpreted as a Unicode codepoint.
174
175If you have UTF-8 encoded data, it is no longer a Unicode string, but a
176Unicode string encoded in UTF-8, giving you a binary string.
177
178=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string.
179
180It's a fact. Learn to live with it.
181
182=back
183
184I hope this helps :)
185
186
137=head1 OBJECT-ORIENTED INTERFACE 187=head1 OBJECT-ORIENTED INTERFACE
138 188
139The object oriented interface lets you configure your own encoding or 189The object oriented interface lets you configure your own encoding or
140decoding style, within the limits of supported formats. 190decoding style, within the limits of supported formats.
141 191
154 204
155=item $json = $json->ascii ([$enable]) 205=item $json = $json->ascii ([$enable])
156 206
157If C<$enable> is true (or missing), then the C<encode> method will not 207If C<$enable> is true (or missing), then the C<encode> method will not
158generate characters outside the code range C<0..127> (which is ASCII). Any 208generate characters outside the code range C<0..127> (which is ASCII). Any
159unicode characters outside that range will be escaped using either a 209Unicode characters outside that range will be escaped using either a
160single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence, 210single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence,
161as per RFC4627. The resulting encoded JSON text can be treated as a native 211as per RFC4627. The resulting encoded JSON text can be treated as a native
162unicode string, an ascii-encoded, latin1-encoded or UTF-8 encoded string, 212Unicode string, an ascii-encoded, latin1-encoded or UTF-8 encoded string,
163or any other superset of ASCII. 213or any other superset of ASCII.
164 214
165If C<$enable> is false, then the C<encode> method will not escape Unicode 215If C<$enable> is false, then the C<encode> method will not escape Unicode
166characters unless required by the JSON syntax or other flags. This results 216characters unless required by the JSON syntax or other flags. This results
167in a faster and more compact format. 217in a faster and more compact format.
176=item $json = $json->latin1 ([$enable]) 226=item $json = $json->latin1 ([$enable])
177 227
178If C<$enable> is true (or missing), then the C<encode> method will encode 228If C<$enable> is true (or missing), then the C<encode> method will encode
179the resulting JSON text as latin1 (or iso-8859-1), escaping any characters 229the resulting JSON text as latin1 (or iso-8859-1), escaping any characters
180outside the code range C<0..255>. The resulting string can be treated as a 230outside the code range C<0..255>. The resulting string can be treated as a
181latin1-encoded JSON text or a native unicode string. The C<decode> method 231latin1-encoded JSON text or a native Unicode string. The C<decode> method
182will not be affected in any way by this flag, as C<decode> by default 232will not be affected in any way by this flag, as C<decode> by default
183expects unicode, which is a strict superset of latin1. 233expects Unicode, which is a strict superset of latin1.
184 234
185If C<$enable> is false, then the C<encode> method will not escape Unicode 235If C<$enable> is false, then the C<encode> method will not escape Unicode
186characters unless required by the JSON syntax or other flags. 236characters unless required by the JSON syntax or other flags.
187 237
188The main use for this flag is efficiently encoding binary data as JSON 238The main use for this flag is efficiently encoding binary data as JSON
189text, as most octets will not be escaped, resulting in a smaller encoded 239text, as most octets will not be escaped, resulting in a smaller encoded
190size. The disadvantage is that the resulting JSON text is encoded 240size. The disadvantage is that the resulting JSON text is encoded
191in latin1 (and must correctly be treated as such when storing and 241in latin1 (and must correctly be treated as such when storing and
192transfering), a rare encoding for JSON. It is therefore most useful when 242transferring), a rare encoding for JSON. It is therefore most useful when
193you want to store data structures known to contain binary data efficiently 243you want to store data structures known to contain binary data efficiently
194in files or databases, not when talking to other JSON encoders/decoders. 244in files or databases, not when talking to other JSON encoders/decoders.
195 245
196 JSON::XS->new->latin1->encode (["\x{89}\x{abc}"] 246 JSON::XS->new->latin1->encode (["\x{89}\x{abc}"]
197 => ["\x{89}\\u0abc"] # (perl syntax, U+abc escaped, U+89 not) 247 => ["\x{89}\\u0abc"] # (perl syntax, U+abc escaped, U+89 not)
205range C<0..255>, they are thus useful for bytewise/binary I/O. In future 255range C<0..255>, they are thus useful for bytewise/binary I/O. In future
206versions, enabling this option might enable autodetection of the UTF-16 256versions, enabling this option might enable autodetection of the UTF-16
207and UTF-32 encoding families, as described in RFC4627. 257and UTF-32 encoding families, as described in RFC4627.
208 258
209If C<$enable> is false, then the C<encode> method will return the JSON 259If C<$enable> is false, then the C<encode> method will return the JSON
210string as a (non-encoded) unicode string, while C<decode> expects thus a 260string as a (non-encoded) Unicode string, while C<decode> expects thus a
211unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs 261Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs
212to be done yourself, e.g. using the Encode module. 262to be done yourself, e.g. using the Encode module.
213 263
214Example, output UTF-16BE-encoded JSON: 264Example, output UTF-16BE-encoded JSON:
215 265
216 use Encode; 266 use Encode;
240 290
241=item $json = $json->indent ([$enable]) 291=item $json = $json->indent ([$enable])
242 292
243If C<$enable> is true (or missing), then the C<encode> method will use a multiline 293If C<$enable> is true (or missing), then the C<encode> method will use a multiline
244format as output, putting every array member or object/hash key-value pair 294format as output, putting every array member or object/hash key-value pair
245into its own line, identing them properly. 295into its own line, indenting them properly.
246 296
247If C<$enable> is false, no newlines or indenting will be produced, and the 297If C<$enable> is false, no newlines or indenting will be produced, and the
248resulting JSON text is guarenteed not to contain any C<newlines>. 298resulting JSON text is guaranteed not to contain any C<newlines>.
249 299
250This setting has no effect when decoding JSON texts. 300This setting has no effect when decoding JSON texts.
251 301
252=item $json = $json->space_before ([$enable]) 302=item $json = $json->space_before ([$enable])
253 303
310 { 360 {
311 "k1": "v1", 361 "k1": "v1",
312 "k2": "v2", <- this comma not normally allowed 362 "k2": "v2", <- this comma not normally allowed
313 } 363 }
314 364
365=item * shell-style '#'-comments
366
367Whenever JSON allows whitespace, shell-style comments are additionally
368allowed. They are terminated by the first carriage-return or line-feed
369character, after which more white-space and comments are allowed.
370
371 [
372 1, # this comment not allowed in JSON
373 # neither this one...
374 ]
375
315=back 376=back
316 377
317=item $json = $json->canonical ([$enable]) 378=item $json = $json->canonical ([$enable])
318 379
319If C<$enable> is true (or missing), then the C<encode> method will output JSON objects 380If C<$enable> is true (or missing), then the C<encode> method will output JSON objects
323pairs in the order Perl stores them (which will likely change between runs 384pairs in the order Perl stores them (which will likely change between runs
324of the same script). 385of the same script).
325 386
326This option is useful if you want the same data structure to be encoded as 387This option is useful if you want the same data structure to be encoded as
327the same JSON text (given the same overall settings). If it is disabled, 388the same JSON text (given the same overall settings). If it is disabled,
328the same hash migh be encoded differently even if contains the same data, 389the same hash might be encoded differently even if contains the same data,
329as key-value pairs have no inherent ordering in Perl. 390as key-value pairs have no inherent ordering in Perl.
330 391
331This setting has no effect when decoding JSON texts. 392This setting has no effect when decoding JSON texts.
332 393
333=item $json = $json->allow_nonref ([$enable]) 394=item $json = $json->allow_nonref ([$enable])
350 411
351=item $json = $json->allow_blessed ([$enable]) 412=item $json = $json->allow_blessed ([$enable])
352 413
353If C<$enable> is true (or missing), then the C<encode> method will not 414If C<$enable> is true (or missing), then the C<encode> method will not
354barf when it encounters a blessed reference. Instead, the value of the 415barf when it encounters a blessed reference. Instead, the value of the
355B<convert_blessed> option will decide wether C<null> (C<convert_blessed> 416B<convert_blessed> option will decide whether C<null> (C<convert_blessed>
356disabled or no C<to_json> method found) or a representation of the 417disabled or no C<to_json> method found) or a representation of the
357object (C<convert_blessed> enabled and C<to_json> method found) is being 418object (C<convert_blessed> enabled and C<to_json> method found) is being
358encoded. Has no effect on C<decode>. 419encoded. Has no effect on C<decode>.
359 420
360If C<$enable> is false (the default), then C<encode> will throw an 421If C<$enable> is false (the default), then C<encode> will throw an
425 486
426As this callback gets called less often then the C<filter_json_object> 487As this callback gets called less often then the C<filter_json_object>
427one, decoding speed will not usually suffer as much. Therefore, single-key 488one, decoding speed will not usually suffer as much. Therefore, single-key
428objects make excellent targets to serialise Perl objects into, especially 489objects make excellent targets to serialise Perl objects into, especially
429as single-key JSON objects are as close to the type-tagged value concept 490as single-key JSON objects are as close to the type-tagged value concept
430as JSON gets (its basically an ID/VALUE tuple). Of course, JSON does not 491as JSON gets (it's basically an ID/VALUE tuple). Of course, JSON does not
431support this in any way, so you need to make sure your data never looks 492support this in any way, so you need to make sure your data never looks
432like a serialised Perl hash. 493like a serialised Perl hash.
433 494
434Typical names for the single object key are C<__class_whatever__>, or 495Typical names for the single object key are C<__class_whatever__>, or
435C<$__dollars_are_rarely_used__$> or C<}ugly_brace_placement>, or even 496C<$__dollars_are_rarely_used__$> or C<}ugly_brace_placement>, or even
562vice versa. These mappings are designed to "do the right thing" in most 623vice versa. These mappings are designed to "do the right thing" in most
563circumstances automatically, preserving round-tripping characteristics 624circumstances automatically, preserving round-tripping characteristics
564(what you put in comes out as something equivalent). 625(what you put in comes out as something equivalent).
565 626
566For the more enlightened: note that in the following descriptions, 627For the more enlightened: note that in the following descriptions,
567lowercase I<perl> refers to the Perl interpreter, while uppcercase I<Perl> 628lowercase I<perl> refers to the Perl interpreter, while uppercase I<Perl>
568refers to the abstract Perl language itself. 629refers to the abstract Perl language itself.
569 630
570 631
571=head2 JSON -> PERL 632=head2 JSON -> PERL
572 633
573=over 4 634=over 4
574 635
575=item object 636=item object
576 637
577A JSON object becomes a reference to a hash in Perl. No ordering of object 638A JSON object becomes a reference to a hash in Perl. No ordering of object
578keys is preserved (JSON does not preserver object key ordering itself). 639keys is preserved (JSON does not preserve object key ordering itself).
579 640
580=item array 641=item array
581 642
582A JSON array becomes a reference to an array in Perl. 643A JSON array becomes a reference to an array in Perl.
583 644
609 670
610=item true, false 671=item true, false
611 672
612These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>, 673These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>,
613respectively. They are overloaded to act almost exactly like the numbers 674respectively. They are overloaded to act almost exactly like the numbers
614C<1> and C<0>. You can check wether a scalar is a JSON boolean by using 675C<1> and C<0>. You can check whether a scalar is a JSON boolean by using
615the C<JSON::XS::is_bool> function. 676the C<JSON::XS::is_bool> function.
616 677
617=item null 678=item null
618 679
619A JSON null atom becomes C<undef> in Perl. 680A JSON null atom becomes C<undef> in Perl.
655 to_json [\0,JSON::XS::true] # yields [false,true] 716 to_json [\0,JSON::XS::true] # yields [false,true]
656 717
657=item JSON::XS::true, JSON::XS::false 718=item JSON::XS::true, JSON::XS::false
658 719
659These special values become JSON true and JSON false values, 720These special values become JSON true and JSON false values,
660respectively. You cna alos use C<\1> and C<\0> directly if you want. 721respectively. You can also use C<\1> and C<\0> directly if you want.
661 722
662=item blessed objects 723=item blessed objects
663 724
664Blessed objects are not allowed. JSON::XS currently tries to encode their 725Blessed objects are not allowed. JSON::XS currently tries to encode their
665underlying representation (hash- or arrayref), but this behaviour might 726underlying representation (hash- or arrayref), but this behaviour might
682 to_json [$value] # yields ["5"] 743 to_json [$value] # yields ["5"]
683 744
684 # undef becomes null 745 # undef becomes null
685 to_json [undef] # yields [null] 746 to_json [undef] # yields [null]
686 747
687You can force the type to be a string by stringifying it: 748You can force the type to be a JSON string by stringifying it:
688 749
689 my $x = 3.1; # some variable containing a number 750 my $x = 3.1; # some variable containing a number
690 "$x"; # stringified 751 "$x"; # stringified
691 $x .= ""; # another, more awkward way to stringify 752 $x .= ""; # another, more awkward way to stringify
692 print $x; # perl does it for you, too, quite often 753 print $x; # perl does it for you, too, quite often
693 754
694You can force the type to be a number by numifying it: 755You can force the type to be a JSON number by numifying it:
695 756
696 my $x = "3"; # some variable containing a string 757 my $x = "3"; # some variable containing a string
697 $x += 0; # numify it, ensuring it will be dumped as a number 758 $x += 0; # numify it, ensuring it will be dumped as a number
698 $x *= 1; # same thing, the choise is yours. 759 $x *= 1; # same thing, the choice is yours.
699 760
700You can not currently output JSON booleans or force the type in other, 761You can not currently force the type in other, less obscure, ways. Tell me
701less obscure, ways. Tell me if you need this capability. 762if you need this capability.
702 763
703=back 764=back
704 765
705 766
706=head1 COMPARISON 767=head1 COMPARISON
715 776
716=item JSON 1.07 777=item JSON 1.07
717 778
718Slow (but very portable, as it is written in pure Perl). 779Slow (but very portable, as it is written in pure Perl).
719 780
720Undocumented/buggy Unicode handling (how JSON handles unicode values is 781Undocumented/buggy Unicode handling (how JSON handles Unicode values is
721undocumented. One can get far by feeding it unicode strings and doing 782undocumented. One can get far by feeding it Unicode strings and doing
722en-/decoding oneself, but unicode escapes are not working properly). 783en-/decoding oneself, but Unicode escapes are not working properly).
723 784
724No roundtripping (strings get clobbered if they look like numbers, e.g. 785No roundtripping (strings get clobbered if they look like numbers, e.g.
725the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will 786the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will
726decode into the number 2. 787decode into the number 2.
727 788
749Very inflexible (no human-readable format supported, format pretty much 810Very inflexible (no human-readable format supported, format pretty much
750undocumented. I need at least a format for easy reading by humans and a 811undocumented. I need at least a format for easy reading by humans and a
751single-line compact format for use in a protocol, and preferably a way to 812single-line compact format for use in a protocol, and preferably a way to
752generate ASCII-only JSON texts). 813generate ASCII-only JSON texts).
753 814
754Completely broken (and confusingly documented) Unicode handling (unicode 815Completely broken (and confusingly documented) Unicode handling (Unicode
755escapes are not working properly, you need to set ImplicitUnicode to 816escapes are not working properly, you need to set ImplicitUnicode to
756I<different> values on en- and decoding to get symmetric behaviour). 817I<different> values on en- and decoding to get symmetric behaviour).
757 818
758No roundtripping (simple cases work, but this depends on wether the scalar 819No roundtripping (simple cases work, but this depends on whether the scalar
759value was used in a numeric context or not). 820value was used in a numeric context or not).
760 821
761Dumping hashes may skip hash values depending on iterator state. 822Dumping hashes may skip hash values depending on iterator state.
762 823
763Unmaintained (maintainer unresponsive for many months, bugs are not 824Unmaintained (maintainer unresponsive for many months, bugs are not
764getting fixed). 825getting fixed).
765 826
766Does not check input for validity (i.e. will accept non-JSON input and 827Does not check input for validity (i.e. will accept non-JSON input and
767return "something" instead of raising an exception. This is a security 828return "something" instead of raising an exception. This is a security
768issue: imagine two banks transfering money between each other using 829issue: imagine two banks transferring money between each other using
769JSON. One bank might parse a given non-JSON request and deduct money, 830JSON. One bank might parse a given non-JSON request and deduct money,
770while the other might reject the transaction with a syntax error. While a 831while the other might reject the transaction with a syntax error. While a
771good protocol will at least recover, that is extra unnecessary work and 832good protocol will at least recover, that is extra unnecessary work and
772the transaction will still not succeed). 833the transaction will still not succeed).
773 834
774=item JSON::DWIW 0.04 835=item JSON::DWIW 0.04
775 836
776Very fast. Very natural. Very nice. 837Very fast. Very natural. Very nice.
777 838
778Undocumented unicode handling (but the best of the pack. Unicode escapes 839Undocumented Unicode handling (but the best of the pack. Unicode escapes
779still don't get parsed properly). 840still don't get parsed properly).
780 841
781Very inflexible. 842Very inflexible.
782 843
783No roundtripping. 844No roundtripping.
803 my $yaml = $to_yaml->encode ($ref) . "\n"; 864 my $yaml = $to_yaml->encode ($ref) . "\n";
804 865
805This will usually generate JSON texts that also parse as valid 866This will usually generate JSON texts that also parse as valid
806YAML. Please note that YAML has hardcoded limits on (simple) object key 867YAML. Please note that YAML has hardcoded limits on (simple) object key
807lengths that JSON doesn't have, so you should make sure that your hash 868lengths that JSON doesn't have, so you should make sure that your hash
808keys are noticably shorter than the 1024 characters YAML allows. 869keys are noticeably shorter than the 1024 characters YAML allows.
809 870
810There might be other incompatibilities that I am not aware of. In general 871There might be other incompatibilities that I am not aware of. In general
811you should not try to generate YAML with a JSON generator or vice versa, 872you should not try to generate YAML with a JSON generator or vice versa,
812or try to parse JSON with a YAML parser or vice versa: chances are high 873or try to parse JSON with a YAML parser or vice versa: chances are high
813that you will run into severe interoperability problems. 874that you will run into severe interoperability problems.
845 JSON::XS/3 | 338250.323 | 218453.333 | 906 JSON::XS/3 | 338250.323 | 218453.333 |
846 Storable | 16500.016 | 135300.129 | 907 Storable | 16500.016 | 135300.129 |
847 -----------+------------+------------+ 908 -----------+------------+------------+
848 909
849That is, JSON::XS is about five times faster than JSON::DWIW on encoding, 910That is, JSON::XS is about five times faster than JSON::DWIW on encoding,
850about three times faster on decoding, and over fourty times faster 911about three times faster on decoding, and over forty times faster
851than JSON, even with pretty-printing and key sorting. It also compares 912than JSON, even with pretty-printing and key sorting. It also compares
852favourably to Storable for small amounts of data. 913favourably to Storable for small amounts of data.
853 914
854Using a longer test string (roughly 18KB, generated from Yahoo! Locals 915Using a longer test string (roughly 18KB, generated from Yahoo! Locals
855search API (http://nanoref.com/yahooapis/mgPdGg): 916search API (http://nanoref.com/yahooapis/mgPdGg):
868 -----------+------------+------------+ 929 -----------+------------+------------+
869 930
870Again, JSON::XS leads by far (except for Storable which non-surprisingly 931Again, JSON::XS leads by far (except for Storable which non-surprisingly
871decodes faster). 932decodes faster).
872 933
873On large strings containing lots of high unicode characters, some modules 934On large strings containing lots of high Unicode characters, some modules
874(such as JSON::PC) seem to decode faster than JSON::XS, but the result 935(such as JSON::PC) seem to decode faster than JSON::XS, but the result
875will be broken due to missing (or wrong) unicode handling. Others refuse 936will be broken due to missing (or wrong) Unicode handling. Others refuse
876to decode or encode properly, so it was impossible to prepare a fair 937to decode or encode properly, so it was impossible to prepare a fair
877comparison table for that case. 938comparison table for that case.
878 939
879 940
880=head1 SECURITY CONSIDERATIONS 941=head1 SECURITY CONSIDERATIONS
886any buffer overflows. Obviously, this module should ensure that and I am 947any buffer overflows. Obviously, this module should ensure that and I am
887trying hard on making that true, but you never know. 948trying hard on making that true, but you never know.
888 949
889Second, you need to avoid resource-starving attacks. That means you should 950Second, you need to avoid resource-starving attacks. That means you should
890limit the size of JSON texts you accept, or make sure then when your 951limit the size of JSON texts you accept, or make sure then when your
891resources run out, thats just fine (e.g. by using a separate process that 952resources run out, that's just fine (e.g. by using a separate process that
892can crash safely). The size of a JSON text in octets or characters is 953can crash safely). The size of a JSON text in octets or characters is
893usually a good indication of the size of the resources required to decode 954usually a good indication of the size of the resources required to decode
894it into a Perl structure. While JSON::XS can check the size of the JSON 955it into a Perl structure. While JSON::XS can check the size of the JSON
895text, it might be too late when you already have it in memory, so you 956text, it might be too late when you already have it in memory, so you
896might want to check the size before you accept the string. 957might want to check the size before you accept the string.
907And last but least, something else could bomb you that I forgot to think 968And last but least, something else could bomb you that I forgot to think
908of. In that case, you get to keep the pieces. I am always open for hints, 969of. In that case, you get to keep the pieces. I am always open for hints,
909though... 970though...
910 971
911If you are using JSON::XS to return packets to consumption 972If you are using JSON::XS to return packets to consumption
912by javascript scripts in a browser you should have a look at 973by JavaScript scripts in a browser you should have a look at
913L<http://jpsykes.com/47/practical-csrf-and-json-security> to see wether 974L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether
914you are vulnerable to some common attack vectors (which really are browser 975you are vulnerable to some common attack vectors (which really are browser
915design bugs, but it is still you who will have to deal with it, as major 976design bugs, but it is still you who will have to deal with it, as major
916browser developers care only for features, not about doing security 977browser developers care only for features, not about doing security
917right). 978right).
918 979
919 980
981=head1 THREADS
982
983This module is I<not> guaranteed to be thread safe and there are no
984plans to change this until Perl gets thread support (as opposed to the
985horribly slow so-called "threads" which are simply slow and bloated
986process simulations - use fork, its I<much> faster, cheaper, better).
987
988(It might actually work, but you have been warned).
989
990
920=head1 BUGS 991=head1 BUGS
921 992
922While the goal of this module is to be correct, that unfortunately does 993While the goal of this module is to be correct, that unfortunately does
923not mean its bug-free, only that I think its design is bug-free. It is 994not mean its bug-free, only that I think its design is bug-free. It is
924still relatively early in its development. If you keep reporting bugs they 995still relatively early in its development. If you keep reporting bugs they
925will be fixed swiftly, though. 996will be fixed swiftly, though.
997
998Please refrain from using rt.cpan.org or any other bug reporting
999service. I put the contact address into my modules for a reason.
926 1000
927=cut 1001=cut
928 1002
929our $true = do { bless \(my $dummy = 1), "JSON::XS::Boolean" }; 1003our $true = do { bless \(my $dummy = 1), "JSON::XS::Boolean" };
930our $false = do { bless \(my $dummy = 0), "JSON::XS::Boolean" }; 1004our $false = do { bless \(my $dummy = 0), "JSON::XS::Boolean" };

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines