CodeIgniter Forums
JSON and XSS_clean method - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Archived Discussions (https://forum.codeigniter.com/forumdisplay.php?fid=20)
+--- Forum: Archived Development & Programming (https://forum.codeigniter.com/forumdisplay.php?fid=23)
+--- Thread: JSON and XSS_clean method (/showthread.php?tid=30609)



JSON and XSS_clean method - El Forum - 05-20-2010

[eluser]Unknown[/eluser]
Hello

I receive in a POST request a JSON encoded string.
My question is simple: Can I use xss_clean() on the encoded JSON string? or do I first have to decode it and execute the xss_clean() on each field in my object?
Can the method xss_clean() "break" a well-formed JSON encoded string?

Thank you,