Re: [Json] Security Considerations

["John Levine" <[e-mail]>]

I'd suggest also adding some warnings to parser writers along these
lines:

A string presented to a json parser may be a well formed json object,
or it may be anything else.  Hence a parser needs to avoid any
assumptions that its input is well-formed.  Even if an input string is
syntactically valid, strings may be longer than the maximum length of
an internal string format, numbers may not be representable in an
internal numeric format, arrays may be longer than the limits of an
internal array format, and an object may include more members than an
internal form can represent. Objects and arrays may be more deeply
nested than an internal form can represent.