Hi, On Wed, Mar 1, 2023 at 1:36 PM Michał Marcin Brzuchalski < michal.brzuchal...@gmail.com> wrote:
> Hi Jakub > > śr., 1 mar 2023, 14:09 użytkownik Jakub Zelenka <bu...@php.net> napisał: > >> > >> > Question ... are you planning to incorporate this by enhancing >> > json_validate() ??? >> > >> >> Yes the plan is to initially enhance json_decode and json_validate that >> would get a new $schema argument . I plan to create a class for the >> actually schema as it needs to be parsed to its own representation so it >> is >> convenient to have it in the object. It could be also later created from >> the different sources than just JSON string (e.g. assoc array / stdClass >> or >> automatic generation from the class that I mentioned before) so it will be >> better to have it in the class. >> >> Regards >> >> Jakub >> > > Do we really need this in core? What makes it less usable as an extension? > > The primary motivation is that this allow stopping decoding / validation once first invalid part is found - basically this is going to be validated as parsed. It means this will eliminate all currently possible DOS attacks on the actual JSON parsing. There are other reasons that we can discuss in more details once proposed like better availability for users but those are just secondary reasons and sort of side effects. Regards Jakub
