Simon Willison’s Weblog

Subscribe

Entries tagged json, security

Filters: Type: entry × json × security × Sorted by date


What are the JSON security concerns in web development?

Be very careful when implementing JSON-P for authenticated actions—evil third party sites could assemble URLs to your user’s private data and steal it. This attack has worked against Gmail in the past.

[... 203 words]

Types

Years

Tags