A high-performance, zero allocation, dynamic JSON Threat Protection in pure Go(github.com)

1 pointsby ankuranand5 anni fa1 comments

A high-performance, zero allocation, dynamic JSON Threat Protection in pure Go

https://github.com/ankur-anand/gojtp

1 comments

What is JSON Threat Protection? JSON requests are susceptible to attacks characterized by unusual inflation of elements and nesting levels. Attackers use recursive techniques to consume memory resources by using huge json files to overwhelm the parser and eventually crash the service. JSON threat protection is terms that describe the way to minimize the risk from such attacks by defining few limits on the json structure like length and depth validation on a json, and helps protect your applications from such intrusions.

There are situations where you do not want to parse the JSON, but do want to ensure that the JSON is not going to cause a problem. Such as an API Gateway. It would be a PITA for the gateway to have to know all JSON schema of all services it is protecting. There are XML validators that perform similar functions.