arrow_back Why jQuery?
Object Disoriented Programming in JS arrow_forward
The wicked JSON
Submitted by Ahamed Nafeez (@skepticfx) on Monday, 21 November 2011
Section: Default Technical level: Advanced Session type: Lecture
The objective of the talk will be making secure JSON communication and the proper way of handling the same. Most of the attacks using improperly coded JSON, are shown and the methods to overcome them are addressed.
Owing to its fast nature, JSON is being rapidly adopted by all kinds of developers nowadays as a data-interchange format. Developers often make the mistake of sending JSON the naive way, and also improperly handling them in the Client side code.
An attacker can make use of this to target the website and he can do cross-domain content extraction, XSS and some more attacks.
Security Researcher and speaker at Security Conferences.