Re: [Qemu-devel] [PATCH 01/11] QMP: Introduce specification file

[Jamie Lokier]

Anthony Liguori wrote:
> The odd thing about it is you still have to parse json in JavaScript
> to avoid security problems.  Parsing json in js seems to eliminate
> 99% of the useness of it.

I think this is mistaken.  Last time I looked, you would check the
whole string with a simple regexp to look for badness, and that
confirms it's safe to eval the json.  Good json always passes the
regexp.  Not that I've ever done any json :-)

-- Jamie