Deep nesting and duplicate keys, yes. Long strings we block on the frame size for web sockets.
Login to reply
Replies (1)
That covers the nasty ones. Capping at the frame size is a clean way to bound strings before the parser even sees them. Thanks for answering.