Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
atamano authored Oct 7, 2023
1 parent 285f545 commit a15893f
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -159,7 +159,13 @@ Main reason you should use this library is for security and stability.

#### Evaluating Expressions

Script expressions (i.e., (...)) are disallowed to prevent XSS injections. Filter expressions (i.e., ?(...)) also avoid using eval or static-eval for security reasons. Instead, jsonpathly has its own parser and evaluator. For example, "$[(@.number +5 > $.otherNumber * 10 + 2)]" is valid, but "?(alert("hello"))" will produce a syntax error (which would trigger an alert in some JavaScript libraries).
Script expressions (i.e., (...)) are disallowed to prevent XSS injections.

Filter expressions (i.e., ?(...)) also avoid using eval or static-eval for security reasons.

Instead, jsonpathly has its own parser and evaluator. For example, `$[(@.number +5 > $.otherNumber * 10 + 2)]`
is valid, but
`?(alert("hello"))` will produce a syntax error (which would trigger an alert in some JavaScript libraries).

#### Grammar

Expand Down

0 comments on commit a15893f

Please sign in to comment.