You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@shindig.apache.org by "Kevin Brown (JIRA)" <ji...@apache.org> on 2009/06/22 22:17:07 UTC

[jira] Commented: (SHINDIG-1095) Upgrade to json-lib 2.2.2

    [ https://issues.apache.org/jira/browse/SHINDIG-1095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12722794#action_12722794 ] 

Kevin Brown commented on SHINDIG-1095:
--------------------------------------

serialization is terrible in all the libraries. json simple and gson do a better job, but they still allocate more buffers than is necessary. All of these libraries exhibit security holes in their serialization. This is why I wrote JsonSerializer.

org.json's parser is all kinds of bad. net.sf is a little better. json simple is really good.

> Upgrade to json-lib 2.2.2
> -------------------------
>
>                 Key: SHINDIG-1095
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-1095
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Java
>    Affects Versions: trunk
>            Reporter: Paul Lindner
>            Assignee: Paul Lindner
>             Fix For: trunk
>
>
> A newer json-lib is available.  Would be nice to come to a conclusion about which json marshal/unmarshal code is best...

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.