Posts Tagged: json

I am learning so much every day at Zilverline, and I’d really like to write them down some time and share. Mostly just because this way I can summarise what I’ve learned and carve it into my brains. And it also gives me the chance to show you how awesome it is to be creating software at Zilverline. As a Scrum Master, be more pro-active pursuing (solving) impediments for the team. I really need to fix my tmux issues so I can develop Ruby (on Rails) in VIM properly. You can use keyboard shortcuts in GMail, awesome! I… Read Article →

Recently I have had the opportunity to fix a cross-site-scripting problem. The problem: a lot of JSON objects are being sent over the wire and the data is not being html escaped. This means that anyone who would put html data IN would get it out and make any user vulnerable for XSS attacks. In this case, JSON objects are being created by using the MappingJacksonHttpMessageConverter. This is deliverd by the Spring framework. Normally it is instantiated when you use spring-mvc (using the mvc-annotation tag). This allowed us to just return an object and the… Read Article →

Scroll To Top