ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/JSON-XS/XS.pm
(Generate patch)

Comparing JSON-XS/XS.pm (file contents):
Revision 1.62 by root, Thu Oct 11 22:52:52 2007 UTC vs.
Revision 1.68 by root, Tue Oct 23 03:30:02 2007 UTC

1=encoding utf-8
2
3=head1 NAME 1=head1 NAME
4 2
5JSON::XS - JSON serialising/deserialising, done correctly and fast 3JSON::XS - JSON serialising/deserialising, done correctly and fast
6 4
7JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ 5JSON::XS - 正しくて高速な JSON シリアライザ/デシリアライザ
42 40
43=head2 FEATURES 41=head2 FEATURES
44 42
45=over 4 43=over 4
46 44
47=item * correct unicode handling 45=item * correct Unicode handling
48 46
49This module knows how to handle Unicode, and even documents how and when 47This module knows how to handle Unicode, and even documents how and when
50it does so. 48it does so.
51 49
52=item * round-trip integrity 50=item * round-trip integrity
72This module has both a simple functional interface as well as an OO 70This module has both a simple functional interface as well as an OO
73interface. 71interface.
74 72
75=item * reasonably versatile output formats 73=item * reasonably versatile output formats
76 74
77You can choose between the most compact guarenteed single-line format 75You can choose between the most compact guaranteed single-line format
78possible (nice for simple line-based protocols), a pure-ascii format 76possible (nice for simple line-based protocols), a pure-ascii format
79(for when your transport is not 8-bit clean, still supports the whole 77(for when your transport is not 8-bit clean, still supports the whole
80unicode range), or a pretty-printed format (for when you want to read that 78Unicode range), or a pretty-printed format (for when you want to read that
81stuff). Or you can combine those features in whatever way you like. 79stuff). Or you can combine those features in whatever way you like.
82 80
83=back 81=back
84 82
85=cut 83=cut
86 84
87package JSON::XS; 85package JSON::XS;
88 86
89use strict; 87use strict;
90 88
91our $VERSION = '1.5'; 89our $VERSION = '1.52';
92our @ISA = qw(Exporter); 90our @ISA = qw(Exporter);
93 91
94our @EXPORT = qw(to_json from_json); 92our @EXPORT = qw(to_json from_json);
95 93
96use Exporter; 94use Exporter;
97use XSLoader; 95use XSLoader;
98 96
99=head1 FUNCTIONAL INTERFACE 97=head1 FUNCTIONAL INTERFACE
100 98
101The following convinience methods are provided by this module. They are 99The following convenience methods are provided by this module. They are
102exported by default: 100exported by default:
103 101
104=over 4 102=over 4
105 103
106=item $json_text = to_json $perl_scalar 104=item $json_text = to_json $perl_scalar
107 105
108Converts the given Perl data structure (a simple scalar or a reference to 106Converts the given Perl data structure to a UTF-8 encoded, binary string
109a hash or array) to a UTF-8 encoded, binary string (that is, the string contains 107(that is, the string contains octets only). Croaks on error.
110octets only). Croaks on error.
111 108
112This function call is functionally identical to: 109This function call is functionally identical to:
113 110
114 $json_text = JSON::XS->new->utf8->encode ($perl_scalar) 111 $json_text = JSON::XS->new->utf8->encode ($perl_scalar)
115 112
116except being faster. 113except being faster.
117 114
118=item $perl_scalar = from_json $json_text 115=item $perl_scalar = from_json $json_text
119 116
120The opposite of C<to_json>: expects an UTF-8 (binary) string and tries to 117The opposite of C<to_json>: expects an UTF-8 (binary) string and tries
121parse that as an UTF-8 encoded JSON text, returning the resulting simple 118to parse that as an UTF-8 encoded JSON text, returning the resulting
122scalar or reference. Croaks on error. 119reference. Croaks on error.
123 120
124This function call is functionally identical to: 121This function call is functionally identical to:
125 122
126 $perl_scalar = JSON::XS->new->utf8->decode ($json_text) 123 $perl_scalar = JSON::XS->new->utf8->decode ($json_text)
127 124
137Perl. 134Perl.
138 135
139=back 136=back
140 137
141 138
139=head1 A FEW NOTES ON UNICODE AND PERL
140
141Since this often leads to confusion, here are a few very clear words on
142how Unicode works in Perl, modulo bugs.
143
144=over 4
145
146=item 1. Perl strings can store characters with ordinal values > 255.
147
148This enables you to store Unicode characters as single characters in a
149Perl string - very natural.
150
151=item 2. Perl does I<not> associate an encoding with your strings.
152
153Unless you force it to, e.g. when matching it against a regex, or printing
154the scalar to a file, in which case Perl either interprets your string as
155locale-encoded text, octets/binary, or as Unicode, depending on various
156settings. In no case is an encoding stored together with your data, it is
157I<use> that decides encoding, not any magical metadata.
158
159=item 3. The internal utf-8 flag has no meaning with regards to the
160encoding of your string.
161
162Just ignore that flag unless you debug a Perl bug, a module written in
163XS or want to dive into the internals of perl. Otherwise it will only
164confuse you, as, despite the name, it says nothing about how your string
165is encoded. You can have Unicode strings with that flag set, with that
166flag clear, and you can have binary data with that flag set and that flag
167clear. Other possibilities exist, too.
168
169If you didn't know about that flag, just the better, pretend it doesn't
170exist.
171
172=item 4. A "Unicode String" is simply a string where each character can be
173validly interpreted as a Unicode codepoint.
174
175If you have UTF-8 encoded data, it is no longer a Unicode string, but a
176Unicode string encoded in UTF-8, giving you a binary string.
177
178=item 5. A string containing "high" (> 255) character values is I<not> a UTF-8 string.
179
180It's a fact. Learn to live with it.
181
182=back
183
184I hope this helps :)
185
186
142=head1 OBJECT-ORIENTED INTERFACE 187=head1 OBJECT-ORIENTED INTERFACE
143 188
144The object oriented interface lets you configure your own encoding or 189The object oriented interface lets you configure your own encoding or
145decoding style, within the limits of supported formats. 190decoding style, within the limits of supported formats.
146 191
159 204
160=item $json = $json->ascii ([$enable]) 205=item $json = $json->ascii ([$enable])
161 206
162If C<$enable> is true (or missing), then the C<encode> method will not 207If C<$enable> is true (or missing), then the C<encode> method will not
163generate characters outside the code range C<0..127> (which is ASCII). Any 208generate characters outside the code range C<0..127> (which is ASCII). Any
164unicode characters outside that range will be escaped using either a 209Unicode characters outside that range will be escaped using either a
165single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence, 210single \uXXXX (BMP characters) or a double \uHHHH\uLLLLL escape sequence,
166as per RFC4627. The resulting encoded JSON text can be treated as a native 211as per RFC4627. The resulting encoded JSON text can be treated as a native
167unicode string, an ascii-encoded, latin1-encoded or UTF-8 encoded string, 212Unicode string, an ascii-encoded, latin1-encoded or UTF-8 encoded string,
168or any other superset of ASCII. 213or any other superset of ASCII.
169 214
170If C<$enable> is false, then the C<encode> method will not escape Unicode 215If C<$enable> is false, then the C<encode> method will not escape Unicode
171characters unless required by the JSON syntax or other flags. This results 216characters unless required by the JSON syntax or other flags. This results
172in a faster and more compact format. 217in a faster and more compact format.
181=item $json = $json->latin1 ([$enable]) 226=item $json = $json->latin1 ([$enable])
182 227
183If C<$enable> is true (or missing), then the C<encode> method will encode 228If C<$enable> is true (or missing), then the C<encode> method will encode
184the resulting JSON text as latin1 (or iso-8859-1), escaping any characters 229the resulting JSON text as latin1 (or iso-8859-1), escaping any characters
185outside the code range C<0..255>. The resulting string can be treated as a 230outside the code range C<0..255>. The resulting string can be treated as a
186latin1-encoded JSON text or a native unicode string. The C<decode> method 231latin1-encoded JSON text or a native Unicode string. The C<decode> method
187will not be affected in any way by this flag, as C<decode> by default 232will not be affected in any way by this flag, as C<decode> by default
188expects unicode, which is a strict superset of latin1. 233expects Unicode, which is a strict superset of latin1.
189 234
190If C<$enable> is false, then the C<encode> method will not escape Unicode 235If C<$enable> is false, then the C<encode> method will not escape Unicode
191characters unless required by the JSON syntax or other flags. 236characters unless required by the JSON syntax or other flags.
192 237
193The main use for this flag is efficiently encoding binary data as JSON 238The main use for this flag is efficiently encoding binary data as JSON
194text, as most octets will not be escaped, resulting in a smaller encoded 239text, as most octets will not be escaped, resulting in a smaller encoded
195size. The disadvantage is that the resulting JSON text is encoded 240size. The disadvantage is that the resulting JSON text is encoded
196in latin1 (and must correctly be treated as such when storing and 241in latin1 (and must correctly be treated as such when storing and
197transfering), a rare encoding for JSON. It is therefore most useful when 242transferring), a rare encoding for JSON. It is therefore most useful when
198you want to store data structures known to contain binary data efficiently 243you want to store data structures known to contain binary data efficiently
199in files or databases, not when talking to other JSON encoders/decoders. 244in files or databases, not when talking to other JSON encoders/decoders.
200 245
201 JSON::XS->new->latin1->encode (["\x{89}\x{abc}"] 246 JSON::XS->new->latin1->encode (["\x{89}\x{abc}"]
202 => ["\x{89}\\u0abc"] # (perl syntax, U+abc escaped, U+89 not) 247 => ["\x{89}\\u0abc"] # (perl syntax, U+abc escaped, U+89 not)
210range C<0..255>, they are thus useful for bytewise/binary I/O. In future 255range C<0..255>, they are thus useful for bytewise/binary I/O. In future
211versions, enabling this option might enable autodetection of the UTF-16 256versions, enabling this option might enable autodetection of the UTF-16
212and UTF-32 encoding families, as described in RFC4627. 257and UTF-32 encoding families, as described in RFC4627.
213 258
214If C<$enable> is false, then the C<encode> method will return the JSON 259If C<$enable> is false, then the C<encode> method will return the JSON
215string as a (non-encoded) unicode string, while C<decode> expects thus a 260string as a (non-encoded) Unicode string, while C<decode> expects thus a
216unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs 261Unicode string. Any decoding or encoding (e.g. to UTF-8 or UTF-16) needs
217to be done yourself, e.g. using the Encode module. 262to be done yourself, e.g. using the Encode module.
218 263
219Example, output UTF-16BE-encoded JSON: 264Example, output UTF-16BE-encoded JSON:
220 265
221 use Encode; 266 use Encode;
245 290
246=item $json = $json->indent ([$enable]) 291=item $json = $json->indent ([$enable])
247 292
248If C<$enable> is true (or missing), then the C<encode> method will use a multiline 293If C<$enable> is true (or missing), then the C<encode> method will use a multiline
249format as output, putting every array member or object/hash key-value pair 294format as output, putting every array member or object/hash key-value pair
250into its own line, identing them properly. 295into its own line, indenting them properly.
251 296
252If C<$enable> is false, no newlines or indenting will be produced, and the 297If C<$enable> is false, no newlines or indenting will be produced, and the
253resulting JSON text is guarenteed not to contain any C<newlines>. 298resulting JSON text is guaranteed not to contain any C<newlines>.
254 299
255This setting has no effect when decoding JSON texts. 300This setting has no effect when decoding JSON texts.
256 301
257=item $json = $json->space_before ([$enable]) 302=item $json = $json->space_before ([$enable])
258 303
339pairs in the order Perl stores them (which will likely change between runs 384pairs in the order Perl stores them (which will likely change between runs
340of the same script). 385of the same script).
341 386
342This option is useful if you want the same data structure to be encoded as 387This option is useful if you want the same data structure to be encoded as
343the same JSON text (given the same overall settings). If it is disabled, 388the same JSON text (given the same overall settings). If it is disabled,
344the same hash migh be encoded differently even if contains the same data, 389the same hash might be encoded differently even if contains the same data,
345as key-value pairs have no inherent ordering in Perl. 390as key-value pairs have no inherent ordering in Perl.
346 391
347This setting has no effect when decoding JSON texts. 392This setting has no effect when decoding JSON texts.
348 393
349=item $json = $json->allow_nonref ([$enable]) 394=item $json = $json->allow_nonref ([$enable])
366 411
367=item $json = $json->allow_blessed ([$enable]) 412=item $json = $json->allow_blessed ([$enable])
368 413
369If C<$enable> is true (or missing), then the C<encode> method will not 414If C<$enable> is true (or missing), then the C<encode> method will not
370barf when it encounters a blessed reference. Instead, the value of the 415barf when it encounters a blessed reference. Instead, the value of the
371B<convert_blessed> option will decide wether C<null> (C<convert_blessed> 416B<convert_blessed> option will decide whether C<null> (C<convert_blessed>
372disabled or no C<to_json> method found) or a representation of the 417disabled or no C<to_json> method found) or a representation of the
373object (C<convert_blessed> enabled and C<to_json> method found) is being 418object (C<convert_blessed> enabled and C<to_json> method found) is being
374encoded. Has no effect on C<decode>. 419encoded. Has no effect on C<decode>.
375 420
376If C<$enable> is false (the default), then C<encode> will throw an 421If C<$enable> is false (the default), then C<encode> will throw an
441 486
442As this callback gets called less often then the C<filter_json_object> 487As this callback gets called less often then the C<filter_json_object>
443one, decoding speed will not usually suffer as much. Therefore, single-key 488one, decoding speed will not usually suffer as much. Therefore, single-key
444objects make excellent targets to serialise Perl objects into, especially 489objects make excellent targets to serialise Perl objects into, especially
445as single-key JSON objects are as close to the type-tagged value concept 490as single-key JSON objects are as close to the type-tagged value concept
446as JSON gets (its basically an ID/VALUE tuple). Of course, JSON does not 491as JSON gets (it's basically an ID/VALUE tuple). Of course, JSON does not
447support this in any way, so you need to make sure your data never looks 492support this in any way, so you need to make sure your data never looks
448like a serialised Perl hash. 493like a serialised Perl hash.
449 494
450Typical names for the single object key are C<__class_whatever__>, or 495Typical names for the single object key are C<__class_whatever__>, or
451C<$__dollars_are_rarely_used__$> or C<}ugly_brace_placement>, or even 496C<$__dollars_are_rarely_used__$> or C<}ugly_brace_placement>, or even
578vice versa. These mappings are designed to "do the right thing" in most 623vice versa. These mappings are designed to "do the right thing" in most
579circumstances automatically, preserving round-tripping characteristics 624circumstances automatically, preserving round-tripping characteristics
580(what you put in comes out as something equivalent). 625(what you put in comes out as something equivalent).
581 626
582For the more enlightened: note that in the following descriptions, 627For the more enlightened: note that in the following descriptions,
583lowercase I<perl> refers to the Perl interpreter, while uppcercase I<Perl> 628lowercase I<perl> refers to the Perl interpreter, while uppercase I<Perl>
584refers to the abstract Perl language itself. 629refers to the abstract Perl language itself.
585 630
586 631
587=head2 JSON -> PERL 632=head2 JSON -> PERL
588 633
589=over 4 634=over 4
590 635
591=item object 636=item object
592 637
593A JSON object becomes a reference to a hash in Perl. No ordering of object 638A JSON object becomes a reference to a hash in Perl. No ordering of object
594keys is preserved (JSON does not preserver object key ordering itself). 639keys is preserved (JSON does not preserve object key ordering itself).
595 640
596=item array 641=item array
597 642
598A JSON array becomes a reference to an array in Perl. 643A JSON array becomes a reference to an array in Perl.
599 644
625 670
626=item true, false 671=item true, false
627 672
628These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>, 673These JSON atoms become C<JSON::XS::true> and C<JSON::XS::false>,
629respectively. They are overloaded to act almost exactly like the numbers 674respectively. They are overloaded to act almost exactly like the numbers
630C<1> and C<0>. You can check wether a scalar is a JSON boolean by using 675C<1> and C<0>. You can check whether a scalar is a JSON boolean by using
631the C<JSON::XS::is_bool> function. 676the C<JSON::XS::is_bool> function.
632 677
633=item null 678=item null
634 679
635A JSON null atom becomes C<undef> in Perl. 680A JSON null atom becomes C<undef> in Perl.
698 to_json [$value] # yields ["5"] 743 to_json [$value] # yields ["5"]
699 744
700 # undef becomes null 745 # undef becomes null
701 to_json [undef] # yields [null] 746 to_json [undef] # yields [null]
702 747
703You can force the type to be a string by stringifying it: 748You can force the type to be a JSON string by stringifying it:
704 749
705 my $x = 3.1; # some variable containing a number 750 my $x = 3.1; # some variable containing a number
706 "$x"; # stringified 751 "$x"; # stringified
707 $x .= ""; # another, more awkward way to stringify 752 $x .= ""; # another, more awkward way to stringify
708 print $x; # perl does it for you, too, quite often 753 print $x; # perl does it for you, too, quite often
709 754
710You can force the type to be a number by numifying it: 755You can force the type to be a JSON number by numifying it:
711 756
712 my $x = "3"; # some variable containing a string 757 my $x = "3"; # some variable containing a string
713 $x += 0; # numify it, ensuring it will be dumped as a number 758 $x += 0; # numify it, ensuring it will be dumped as a number
714 $x *= 1; # same thing, the choise is yours. 759 $x *= 1; # same thing, the choice is yours.
715 760
716You can not currently output JSON booleans or force the type in other, 761You can not currently force the type in other, less obscure, ways. Tell me
717less obscure, ways. Tell me if you need this capability. 762if you need this capability.
718 763
719=back 764=back
720 765
721 766
722=head1 COMPARISON 767=head1 COMPARISON
731 776
732=item JSON 1.07 777=item JSON 1.07
733 778
734Slow (but very portable, as it is written in pure Perl). 779Slow (but very portable, as it is written in pure Perl).
735 780
736Undocumented/buggy Unicode handling (how JSON handles unicode values is 781Undocumented/buggy Unicode handling (how JSON handles Unicode values is
737undocumented. One can get far by feeding it unicode strings and doing 782undocumented. One can get far by feeding it Unicode strings and doing
738en-/decoding oneself, but unicode escapes are not working properly). 783en-/decoding oneself, but Unicode escapes are not working properly).
739 784
740No roundtripping (strings get clobbered if they look like numbers, e.g. 785No roundtripping (strings get clobbered if they look like numbers, e.g.
741the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will 786the string C<2.0> will encode to C<2.0> instead of C<"2.0">, and that will
742decode into the number 2. 787decode into the number 2.
743 788
765Very inflexible (no human-readable format supported, format pretty much 810Very inflexible (no human-readable format supported, format pretty much
766undocumented. I need at least a format for easy reading by humans and a 811undocumented. I need at least a format for easy reading by humans and a
767single-line compact format for use in a protocol, and preferably a way to 812single-line compact format for use in a protocol, and preferably a way to
768generate ASCII-only JSON texts). 813generate ASCII-only JSON texts).
769 814
770Completely broken (and confusingly documented) Unicode handling (unicode 815Completely broken (and confusingly documented) Unicode handling (Unicode
771escapes are not working properly, you need to set ImplicitUnicode to 816escapes are not working properly, you need to set ImplicitUnicode to
772I<different> values on en- and decoding to get symmetric behaviour). 817I<different> values on en- and decoding to get symmetric behaviour).
773 818
774No roundtripping (simple cases work, but this depends on wether the scalar 819No roundtripping (simple cases work, but this depends on whether the scalar
775value was used in a numeric context or not). 820value was used in a numeric context or not).
776 821
777Dumping hashes may skip hash values depending on iterator state. 822Dumping hashes may skip hash values depending on iterator state.
778 823
779Unmaintained (maintainer unresponsive for many months, bugs are not 824Unmaintained (maintainer unresponsive for many months, bugs are not
780getting fixed). 825getting fixed).
781 826
782Does not check input for validity (i.e. will accept non-JSON input and 827Does not check input for validity (i.e. will accept non-JSON input and
783return "something" instead of raising an exception. This is a security 828return "something" instead of raising an exception. This is a security
784issue: imagine two banks transfering money between each other using 829issue: imagine two banks transferring money between each other using
785JSON. One bank might parse a given non-JSON request and deduct money, 830JSON. One bank might parse a given non-JSON request and deduct money,
786while the other might reject the transaction with a syntax error. While a 831while the other might reject the transaction with a syntax error. While a
787good protocol will at least recover, that is extra unnecessary work and 832good protocol will at least recover, that is extra unnecessary work and
788the transaction will still not succeed). 833the transaction will still not succeed).
789 834
790=item JSON::DWIW 0.04 835=item JSON::DWIW 0.04
791 836
792Very fast. Very natural. Very nice. 837Very fast. Very natural. Very nice.
793 838
794Undocumented unicode handling (but the best of the pack. Unicode escapes 839Undocumented Unicode handling (but the best of the pack. Unicode escapes
795still don't get parsed properly). 840still don't get parsed properly).
796 841
797Very inflexible. 842Very inflexible.
798 843
799No roundtripping. 844No roundtripping.
819 my $yaml = $to_yaml->encode ($ref) . "\n"; 864 my $yaml = $to_yaml->encode ($ref) . "\n";
820 865
821This will usually generate JSON texts that also parse as valid 866This will usually generate JSON texts that also parse as valid
822YAML. Please note that YAML has hardcoded limits on (simple) object key 867YAML. Please note that YAML has hardcoded limits on (simple) object key
823lengths that JSON doesn't have, so you should make sure that your hash 868lengths that JSON doesn't have, so you should make sure that your hash
824keys are noticably shorter than the 1024 characters YAML allows. 869keys are noticeably shorter than the 1024 characters YAML allows.
825 870
826There might be other incompatibilities that I am not aware of. In general 871There might be other incompatibilities that I am not aware of. In general
827you should not try to generate YAML with a JSON generator or vice versa, 872you should not try to generate YAML with a JSON generator or vice versa,
828or try to parse JSON with a YAML parser or vice versa: chances are high 873or try to parse JSON with a YAML parser or vice versa: chances are high
829that you will run into severe interoperability problems. 874that you will run into severe interoperability problems.
861 JSON::XS/3 | 338250.323 | 218453.333 | 906 JSON::XS/3 | 338250.323 | 218453.333 |
862 Storable | 16500.016 | 135300.129 | 907 Storable | 16500.016 | 135300.129 |
863 -----------+------------+------------+ 908 -----------+------------+------------+
864 909
865That is, JSON::XS is about five times faster than JSON::DWIW on encoding, 910That is, JSON::XS is about five times faster than JSON::DWIW on encoding,
866about three times faster on decoding, and over fourty times faster 911about three times faster on decoding, and over forty times faster
867than JSON, even with pretty-printing and key sorting. It also compares 912than JSON, even with pretty-printing and key sorting. It also compares
868favourably to Storable for small amounts of data. 913favourably to Storable for small amounts of data.
869 914
870Using a longer test string (roughly 18KB, generated from Yahoo! Locals 915Using a longer test string (roughly 18KB, generated from Yahoo! Locals
871search API (http://nanoref.com/yahooapis/mgPdGg): 916search API (http://nanoref.com/yahooapis/mgPdGg):
884 -----------+------------+------------+ 929 -----------+------------+------------+
885 930
886Again, JSON::XS leads by far (except for Storable which non-surprisingly 931Again, JSON::XS leads by far (except for Storable which non-surprisingly
887decodes faster). 932decodes faster).
888 933
889On large strings containing lots of high unicode characters, some modules 934On large strings containing lots of high Unicode characters, some modules
890(such as JSON::PC) seem to decode faster than JSON::XS, but the result 935(such as JSON::PC) seem to decode faster than JSON::XS, but the result
891will be broken due to missing (or wrong) unicode handling. Others refuse 936will be broken due to missing (or wrong) Unicode handling. Others refuse
892to decode or encode properly, so it was impossible to prepare a fair 937to decode or encode properly, so it was impossible to prepare a fair
893comparison table for that case. 938comparison table for that case.
894 939
895 940
896=head1 SECURITY CONSIDERATIONS 941=head1 SECURITY CONSIDERATIONS
902any buffer overflows. Obviously, this module should ensure that and I am 947any buffer overflows. Obviously, this module should ensure that and I am
903trying hard on making that true, but you never know. 948trying hard on making that true, but you never know.
904 949
905Second, you need to avoid resource-starving attacks. That means you should 950Second, you need to avoid resource-starving attacks. That means you should
906limit the size of JSON texts you accept, or make sure then when your 951limit the size of JSON texts you accept, or make sure then when your
907resources run out, thats just fine (e.g. by using a separate process that 952resources run out, that's just fine (e.g. by using a separate process that
908can crash safely). The size of a JSON text in octets or characters is 953can crash safely). The size of a JSON text in octets or characters is
909usually a good indication of the size of the resources required to decode 954usually a good indication of the size of the resources required to decode
910it into a Perl structure. While JSON::XS can check the size of the JSON 955it into a Perl structure. While JSON::XS can check the size of the JSON
911text, it might be too late when you already have it in memory, so you 956text, it might be too late when you already have it in memory, so you
912might want to check the size before you accept the string. 957might want to check the size before you accept the string.
923And last but least, something else could bomb you that I forgot to think 968And last but least, something else could bomb you that I forgot to think
924of. In that case, you get to keep the pieces. I am always open for hints, 969of. In that case, you get to keep the pieces. I am always open for hints,
925though... 970though...
926 971
927If you are using JSON::XS to return packets to consumption 972If you are using JSON::XS to return packets to consumption
928by javascript scripts in a browser you should have a look at 973by JavaScript scripts in a browser you should have a look at
929L<http://jpsykes.com/47/practical-csrf-and-json-security> to see wether 974L<http://jpsykes.com/47/practical-csrf-and-json-security> to see whether
930you are vulnerable to some common attack vectors (which really are browser 975you are vulnerable to some common attack vectors (which really are browser
931design bugs, but it is still you who will have to deal with it, as major 976design bugs, but it is still you who will have to deal with it, as major
932browser developers care only for features, not about doing security 977browser developers care only for features, not about doing security
933right). 978right).
934 979
935 980
981=head1 THREADS
982
983This module is I<not> guaranteed to be thread safe and there are no
984plans to change this until Perl gets thread support (as opposed to the
985horribly slow so-called "threads" which are simply slow and bloated
986process simulations - use fork, its I<much> faster, cheaper, better).
987
988(It might actually work, but you have been warned).
989
990
936=head1 BUGS 991=head1 BUGS
937 992
938While the goal of this module is to be correct, that unfortunately does 993While the goal of this module is to be correct, that unfortunately does
939not mean its bug-free, only that I think its design is bug-free. It is 994not mean its bug-free, only that I think its design is bug-free. It is
940still relatively early in its development. If you keep reporting bugs they 995still relatively early in its development. If you keep reporting bugs they
941will be fixed swiftly, though. 996will be fixed swiftly, though.
997
998Please refrain from using rt.cpan.org or any other bug reporting
999service. I put the contact address into my modules for a reason.
942 1000
943=cut 1001=cut
944 1002
945our $true = do { bless \(my $dummy = 1), "JSON::XS::Boolean" }; 1003our $true = do { bless \(my $dummy = 1), "JSON::XS::Boolean" };
946our $false = do { bless \(my $dummy = 0), "JSON::XS::Boolean" }; 1004our $false = do { bless \(my $dummy = 0), "JSON::XS::Boolean" };

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines