Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for protection against JSON Vulnerability #14

Open
bjartek opened this issue Oct 10, 2013 · 0 comments
Open

Support for protection against JSON Vulnerability #14

bjartek opened this issue Oct 10, 2013 · 0 comments

Comments

@bjartek
Copy link
Contributor

bjartek commented Oct 10, 2013

Vulnerability: http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx

Reference: http://code.angularjs.org/1.1.4/docs/api/ng.$http#put

Trait that adds a implicit Writeable that contains the mentioned character sequence: http://stackoverflow.com/questions/14614458/how-to-prefix-all-json-responces-in-play2-to-prevent-jsonp-escalation-via-valnur

It is not possible to include the given trait in the stackoverflow link since the controller is a abstract class and not a trait. If the Autosource controllers were traits they could be mixed in in any order possible.

Another possiblity is to include the given implicit in the controllers themselves? //Not sure how other parsers handle them though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant