How should I parse JSON using Node.js? Is there some module which will validate and parse JSON securely?
|
You can simply use node.js is built on V8, which provides the global object Note - |
|||||||||||||||||||||
|
you can require .json files.
For example if you have a
or (file extension can be omitted):
note that Also note You should only use this for local files under your absolute control, as it potentially executes any code within the file. |
|||||||||||||||||||||
|
You can use You should be able to use the Parsing a string containing JSON data
Parsing a file containing JSON dataYou'll have to do some file operations with Asynchronous version
Synchronous version
You wanna use
|
use the JSON object:
|
|||||||||||||||||||||
|
Another example of JSON.parse :
|
|||||
|
I'd like to mention that there are alternatives to the global JSON object.
Have a look: https://github.com/joyent/node/wiki/Modules#wiki-parsers-json |
|||||||||||||||||
|
Include the
For more info on 'fs' library , refer the documentation at http://nodejs.org/api/fs.html |
|||||||||
|
Since you don't know that your string is actually valid, I would put it first into a try catch. Also since try catch blocks are not optimized by node, i would put the entire thing into another function:
OR in "async style"
|
|||||
|
Parsing a JSON stream? Use
|
|||
|
That's all. |
||||
|
as other answers here have mentioned, you probably want to either require a local json file that you know is safe and present, like a configuration file:
or to use the global JSON object to parse a string value into an object:
note that when you require a file the content of that file is evaluated, which introduces a security risk in case it's not a json file but a js file. here, i've published a demo where you can see both methods and play with them online (the parsing example is in app.js file - then click on the run button and see the result in the terminal): http://staging1.codefresh.io/labs/api/env/json-parse-example you can modify the code and see the impact... |
|||||
|
Everybody here has told about JSON.parse, so I thought of saying something else. There is a great module Connect with many middleware to make development of apps easier and better. One of the middleware is bodyParser. It parses JSON, html-forms and etc. There is also a specific middleware for JSON parsing only noop. Take a look at the links above, it might be really helpful to you. |
|||
|
My solution:
|
||||
|
Just to make this as complicated as possible, and bring in as many packages as possible...
This lets you do:
Or if you're using async/await:
The advantage over just using |
||||
|
|
|||
|
JSON.parse will not ensure safety of json string you are parsing. You should look at a library like json-safe-parse or a similar library. From json-safe-parse npm page:
|
|||
|
Leverage Lodash's attempt function to return an error object, which you can handle with the isError function.
|
|||||
|
Always be sure to use JSON.parse in try catch block as node always throw an Unexpected Error if you have some corrupted data in your json so use this code instead of simple JSON.Parse
|
|||
|
Just want to complete the answer (as I struggled with it for a while), want to show how to access the json information, this example shows accessing Json Array:
|
|||
|
This had to be shouted at me: it only works for If the file ending is different this does not work! |
|||
|
It's simple, you can convert JSON to string using |
|||||||||
|
|
|||||
|