writeups.xyz / A web security story from 2008: silently securing JSON.parse

Submitter : c2a

Date: 6 April 2023

Bounty : undisclosed

Vulnerabilities :

• Parsing Issue
• XSS
• Arbitrary Code Execution

Programs :

• JSON.parse

Authors :

• Mike Samuel (@Mvsamuel)

Link :
https://dev.to/mikesamuel/2008-silently-securing-jsonparse-5cbb