Re: [web-nfc] Security review

Regarding parsing JSON. That will not be done using eval but using the
 JSON.parse algorithm, which is considered safe. 

http://www.ecma-international.org/ecma-262/6.0/#sec-json.parse
https://blog.whitehatsec.com/handling-untrusted-json-safely/

The result will be returned in a dictionary. Does this solve your 
worries @ngparker ?

-- 
GitHub Notif of comment by kenchris
See https://github.com/w3c/web-nfc/issues/22#issuecomment-155103634

Received on Monday, 9 November 2015 15:56:21 UTC