JSON
JSON is an injection-safe data format, since it does not allow referencing external entities.
- contrast this with XML, which does allow referencing external entities.
In order for a Javascript object to be serializable as JSON, it must be sanitized of the following values:
undefined
- nested objects
- non-UTF-8 values
JSON Pointer
A JSON Pointer describes a slash-separated path to traverse the keys in the objects in the document. Therefore, /properties/street_address
means:
- find the value of the key
properties
- within that object, find the value of the key
street_address
The URI https://example.com/schemas/address#/properties/street_address
identifies the highlighted subschema in the following schema.
{
"$id": "https://example.com/schemas/address",
"type": "object",
"properties": {
"street_address":
{ "type": "string" }
}
}
Children
Backlinks