3.4 KiB
3.4 KiB
Changelog
1.4.1 (06.07.2023)
- Add limit to decoded integer sizes of 1024 digits. This can be changed
with the
decoding_integer_digit_limit
app env config.
1.4.0 (12.09.2022)
Enhancements
- Use the
:erlang.float_to_binary(_, [:short])
function, instead ofio_lib_format.fwrite_g/1
where available (OTP 24.1+). This provides equivalent output with much less memory used and significantly improved performance.
1.3.0 (21.12.2021)
Enhancements
- Add the
Jason.OrderedObject
struct - Support decoding objects preserving all the keys with
objects: :ordered_objects
option - Support decoding floats to
Decimal
withfloats: :decimals
option - Add
~j
and~J
sigils in moduleJason.Sigil
to support writing JSON literals in code
Fixes
- Fix error reporting when decoding strings (it was possible to mis-attribute the offending byte)
- Verify fields given to
@derive
1.2.2 (08.09.2020)
Enhancements
- Support Decimal 2.0
1.2.1 (04.05.2020)
Security
-
Fix
html_safe
escaping inJason.encode
The
<!--
sequence of characters would not be escaped inJason.encode
withhtml_escape
mode, which could lead to DoS attacks when used for embedding of arbitrary, user controlled strings into HTML through JSON (e.g. inside of<script>
tags).If you were not using the
html_safe
option, you are not affected.Affected versions: < 1.2.1 Patched versions: >= 1.2.1
1.2.0 (17.03.2020)
Enhancements
- Add
Jason.Encode.keyword/2
(cb1f26a).
Bug fixes
- Fix
Jason.Helpers.json_map/1
value expansion (70b046a).
1.1.2 (19.10.2018)
Bug fixes
- correctly handle the
pretty: false
option (ba318c8).
1.1.1 (10.07.2018)
Bug fixes
- correctly handle escape sequences in strings when pretty printing (794bbe4).
1.1.0 (02.07.2018)
Enhancements
- pretty-printing support through
Jason.Formatter
andpretty: true
option inJason.encode/2
(d758e36).
Bug fixes
- silence variable warnings for fields with underscores used during deriving (88dd85c).
- potential incompatibility don't raise
Protocol.UndefinedError
in non-bang functions (ad0f57b).
1.0.1 (02.07.2018)
Bug fixes
- fix
Jason.Encode.escape
type (a57b430) - multiple documentation improvements
1.0.0 (26.01.2018)
No changes
1.0.0-rc.3 (26.01.2018)
Changes
- update
escape
option ofJason.encode/2
to take values::json | :unicode_safe | :html_safe | :javascript_safe
for consistency. Old values of:unicode
and:javascript
are still supported for compatibility with Poison. (f42dcbd)
1.0.0-rc.2 (07.01.2018)
Bug fixes
1.0.0-rc.1 (22.12.2017)
- Initial release