[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: [OASIS Issue Tracker] Commented: (ODATA-100) 5.1 Response Body: explain security reasons leading to the object wrapper
[ http://tools.oasis-open.org/issues/browse/ODATA-100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=32258#action_32258 ] Ralf Handl commented on ODATA-100: ---------------------------------- The security reason was that arrays on the root level of a response would allow code injection into the consumer of the message. All responses are JSON objects, so no code injection vector. > 5.1 Response Body: explain security reasons leading to the object wrapper > ------------------------------------------------------------------------- > > Key: ODATA-100 > URL: http://tools.oasis-open.org/issues/browse/ODATA-100 > Project: OASIS Open Data Protocol (OData) TC > Issue Type: Improvement > Components: OData JSON Format v1.0 > Affects Versions: WD01 > Reporter: Mark Biamonte > Fix For: WD01 > > > See summary. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]