[cgiapp] [OT] Anyone using JSON::XS to output to a web page?

Michael Peters mpeters at plusthree.com
Mon Oct 13 12:14:40 EDT 2008


Peter Karman wrote:

> I believe using eval directly has security issues.

Only if you don't trust your data source. If you control the JSON coming in, then it's not a problem 
to use eval, and in fact, it's much faster. But if you don't control the data source, then yes use 
something else. In this case it sounds like the OP controls his data source since he's having 
problems sending it.

-- 
Michael Peters
Plus Three, LP



More information about the cgiapp mailing list