1. History

2. Data types and syntax
    Example  Data portability issues  Using JSON in JavaScript  Unsupported native data types 

3. Schema and metadata
    JSON Schema 

4. MIME type

5. Applications
    JSON-RPC  AJAJ 

6. Security considerations

7. Vulnerabilities in specific JSON parsers

8. Object references

9. Comparison with other formats
    YAML  XML  Samples  JSON sample  YAML sample  XML samples 

10. See also

11. Notes

12. References

13. External links

In computing, JavaScript Object Notation (JSON) ({{IPAc-en|ˈ|dʒ|eɪ|s|ən}} "jay-son", {{IPAc-en|dʒ|eɪ|ˈ|s|ɒ|n}})^[1] is an open-standard file format that uses human-readable text to transmit data objects consisting of attribute–value pairs and array data types (or any other serializable value). It is a very common data format used for asynchronous browser–server communication, including as a replacement for XML in some AJAX-style systems.^[2]

JSON is a language-independent data format. It was derived from JavaScript, but {{as of | 2017 | lc=on}} many programming languages include code to generate and parse JSON-format data. The official Internet media type for JSON is application/json. JSON filenames use the extension .json.

History

JSON grew out of a need for stateless, real-time server-to-browser communication protocol without using browser plugins such as Flash or Java applets, the dominant methods used in the early 2000s.{{Citation needed|date=December 2016}}

A precursor to the JSON libraries was used in a children's digital asset trading game project named Cartoon Orbit at Communities.com (the State co-founders had all worked at this company previously) for Cartoon Network, which used a browser side plug-in with a proprietary messaging format to manipulate DHTML elements (this system is also owned by 3DO). Upon discovery of early Ajax capabilities, digiGroups, Noosh, and others used frames to pass information into the user browsers' visual field without refreshing a Web application's visual context, realizing real-time rich Web applications using only the standard HTTP, HTML and JavaScript capabilities of Netscape 4.0.5+ and IE 5+. Crockford then found that JavaScript could be used as an object-based messaging format for such a system. The system was sold to Sun Microsystems, Amazon.com and EDS. The JSON.org^[10] website was launched in 2002. In December 2005, Yahoo! began offering some of its Web services in JSON.^[11]

JSON was originally intended to be a subset of the JavaScript scripting language (specifically, Standard ECMA-262 3rd Edition—December 1999^[12]{{Request quotation|date=January 2017}}) and is commonly used with Javascript, but it is a language-independent data format. Code for parsing and generating JSON data is readily available in many programming languages. JSON's website lists JSON libraries by language.

Though JSON was originally advertised and believed to be a strict subset of JavaScript and ECMAScript,^[13]{{failed verification|date=January 2017}} it inadvertently allows some unescaped characters in strings that are illegal in JavaScript and ECMAScript string literals. See Data portability issues below.

JSON itself became an ECMA international standard in 2013 as the ECMA-404 standard.^[14]

In the same year {{IETF RFC|7158}} used ECMA-404 as reference. In 2014 {{IETF RFC|7159}} became the main reference for JSON's internet uses (ex. MIME application/json), and obsoletes {{IETF RFC|4627}} and {{IETF RFC|7158}} (but preserving ECMA-262 and ECMA-404 as main references). In December 2017, {{IETF RFC|7159}} was made obsolete by {{IETF RFC|8259}}.

Data types and syntax

JSON's basic data types are:

• Number: a signed decimal number that may contain a fractional part and may use exponential E notation, but cannot include non-numbers such as NaN. The format makes no distinction between integer and floating-point. JavaScript uses a double-precision floating-point format for all its numeric values, but other languages implementing JSON may encode numbers differently.
• String: a sequence of zero or more Unicode characters. Strings are delimited with double-quotation marks and support a backslash escaping syntax.
• Boolean: either of the values true or false
• Array: an ordered list of zero or more values, each of which may be of any type. Arrays use square bracket notation and elements are comma-separated.
• Object: an unordered collection of name–value pairs where the names (also called keys) are strings. Since objects are intended to represent associative arrays,^[14] it is recommended, though not required,^[16] that each key is unique within an object. Objects are delimited with curly brackets and use commas to separate each pair, while within each pair the colon ':' character separates the key or name from its value.
• null: An empty value, using the word null

Limited whitespace is allowed and ignored around or between syntactic elements (values and punctuation, but not within a string value). Only four specific characters are considered whitespace for this purpose: space, horizontal tab, line feed, and carriage return. In particular, the byte order mark must not be generated by a conforming implementation (though it may be accepted when parsing JSON). JSON does not provide syntax for comments.

Early versions of JSON (such as specified by {{IETF RFC|4627}}) required that a valid JSON "document" must consist of only an object or an array type, which could contain other types within them.

Example

The following example shows a possible JSON representation describing a person.

  "firstName": "John",  "lastName": "Smith",  "isAlive": true,  "age": 27,  "address": {    "streetAddress": "21 2nd Street",    "city": "New York",    "state": "NY",    "postalCode": "10021-3100"  },  "phoneNumbers": [    {      "type": "home",      "number": "212 555-1234"    },    {      "type": "office",      "number": "646 555-4567"    },    {      "type": "mobile",      "number": "123 456-7890"    }  ],  "children": [],  "spouse": null

}

Data portability issues

Although Douglas Crockford originally asserted that JSON is a strict subset of JavaScript, his specification actually allows valid JSON documents that are invalid JavaScript. Specifically, JSON allows the Unicode line terminators {{unichar|2028|LINE SEPARATOR}} and {{unichar|2029|PARAGRAPH SEPARATOR}} to appear unescaped in quoted strings, while ECMAScript 2018 and older does not.^[15][16] This is a consequence of JSON disallowing only "control characters". For maximum portability, these characters should be backslash-escaped. This subtlety is important when generating JSONP.

JSON exchange in an open ecosystem must be encoded in UTF-8.^[17] The encoding supports the full Unicode character set, including those characters outside the Basic Multilingual Plane (U+10000 to U+10FFFF). However, if escaped, those characters must be written using UTF-16 surrogate pairs, a detail missed by some JSON parsers. For example, to include the Emoji character {{unichar|1F602|FACE WITH TEARS OF JOY}} in JSON:

// or

Numbers in JSON are agnostic with regard to their representation within programming languages. No differentiation is made between an integer and floating-point value: some implementations may treat 42, 42.0, and 4.2E+1 as the same number while others may not. Furthermore, no requirements are made regarding implementation issues such as overflow, underflow, loss of precision, or rounding. Additionally, JSON says nothing about the treatment of signed zeros: whether 0.0 is distinct from -0.0. Most implementations that use the IEEE 754 floating-point standard, including JavaScript, preserve signed zeros; but not all JSON implementations may do so.

Using JSON in JavaScript

var p = JSON.parse(json_string);

Unsupported native data types

JavaScript syntax defines several native data types that are not included in the JSON standard:^[19] Map, Set, Date, Error, Regular Expression, Function, Promise, and undefined.^[20] These JavaScript data types must be represented by some other data format, with the programs on both ends agreeing on how to convert between the types. {{As of|2011}}, there are some de facto standards, e.g., converting from Date to String, but none universally recognized.^[21][22] Other languages may have a different set of native types that must be serialized carefully to deal with this type of conversion.

Schema and metadata

JSON Schema

JSON Schema^[23] specifies a JSON-based format to define the structure of JSON data for validation, documentation, and interaction control. It provides a contract for the JSON data required by a given application, and how that data can be modified.

JSON Schema is based on the concepts from XML Schema (XSD), but is JSON-based. As in XSD, the same serialization/deserialization tools can be used both for the schema and data; and is self-describing. It is specified in an Internet Draft at the IETF, currently in its 7th draft, which was released on March 18, 2018.^[24] There are several validators available for different programming languages,^[25] each with varying levels of conformance.

There is no standard file extension, but some have suggested .schema.json.^[26]

Example JSON Schema (draft 4):

  "$schema": "http://json-schema.org/schema#",  "title": "Product",  "type": "object",  "required": ["id", "name", "price"],  "properties": {    "id": {      "type": "number",      "description": "Product identifier"    },    "name": {      "type": "string",      "description": "Name of the product"    },    "price": {      "type": "number",      "minimum": 0    },    "tags": {      "type": "array",      "items": {        "type": "string"      }    },    "stock": {      "type": "object",      "properties": {        "warehouse": {          "type": "number"        },        "retail": {          "type": "number"        }      }    }  }

}

The JSON Schema above can be used to test the validity of the JSON code below:

  "id": 1,  "name": "Foo",  "price": 123,  "tags": [    "Bar",    "Eek"  ],  "stock": {    "warehouse": 300,    "retail": 20  }

}

MIME type

The official MIME type for JSON text is "application/json",^[27] and most modern implementations have adopted this.

The (unofficial) MIME type "text/json" or the content-type "text/javascript" also get legacy support by many service providers, browsers, servers, web applications, libraries, frameworks, and APIs. Notable examples include the Google Search API,^[28] Yahoo!,^[28][29] Flickr,^[28] Facebook API,^[30] Lift framework,^[31] Dojo Toolkit 0.4,^[32] etc.

Applications

JSON-RPC

JSON-RPC is a remote procedure call (RPC) protocol built on JSON, as a replacement for XML-RPC or SOAP. It is a simple protocol that defines only a handful of data types and commands. JSON-RPC lets a system send notifications (information to the server that does not require a response) and multiple calls to the server that can be answered out of order.

Example of a JSON-RPC 2.0 request and response using positional parameters.

<-- {"jsonrpc": "2.0", "result": 19, "id": 1}

AJAJ

Asynchronous JavaScript and JSON (or AJAJ) refers to the same dynamic web page methodology as Ajax, but instead of XML, JSON is the data format. AJAJ is a web development technique that provides for the ability of a webpage to request new data after it has loaded into the web browser. Typically it renders new data from the server in response to user actions on that webpage. For example, what the user types into a search box, client-side code then sends to the server, which immediately responds with a drop-down list of matching database items.

The following JavaScript code is an example of a client using XMLHttpRequest to request data in JSON format from a server. (The server-side programming is omitted; it must be set up to service requests to the url containing a JSON-formatted string.)

var my_JSON_object;

var http_request = new XMLHttpRequest();

http_request.open("GET", url, true);

http_request.responseType = "json";

http_request.onreadystatechange = function () {

  var done = 4, ok = 200;  if (http_request.readyState === done && http_request.status === ok) {    my_JSON_object = http_request.response;  }

};

http_request.send(null);

Security considerations

JSON is intended as a data serialization format. However, its design as a non-strict subset of JavaScript can lead to the misconception that it is safe to pass JSON strings to the JavaScript {{code|lang=javascript|code=eval()}} function. This is not safe, due to the fact that certain valid JSON strings are actually not valid JavaScript code.^[33]

To avoid the many pitfalls caused by executing arbitrary code from the internet, a new function, {{code|lang=javascript|code=JSON.parse()}} was first added to the fifth edition of ECMAScript^[34], which as of 2017 is supported by all major browsers. For non-supported browsers, an API-compatible JavaScript library^[35] is provided by Douglas Crockford.

Vulnerabilities in specific JSON parsers

Various JSON parser implementations have suffered from denial-of-service attack and mass assignment vulnerability.^[36][37]

Object references

The JSON standard does not support object references, but an IETF draft standard for JSON-based object references exists.^[38]

The Dojo Toolkit supports object references using standard JSON; specifically, the dojox.json.ref module provides support for several forms of referencing including circular, multiple, inter-message, and lazy referencing.^[39][40][41]

Alternatively, non-standard solutions exist such as the use of Mozilla JavaScript Sharp Variables. However this functionality became obsolete with JavaScript 1.8.5 and was removed in Firefox version 12.^[42]

Comparison with other formats

JSON is promoted as a low-overhead alternative to XML as both of these formats have widespread support for creation, reading, and decoding in the real-world situations where they are commonly used.^[43] Apart from XML, examples could include OGDL, YAML and CSV. Also, Google Protocol Buffers can fill this role, although it is not a data interchange language.

YAML

XML

XML has been used to describe structured data and to serialize objects. Various XML-based protocols exist to represent the same kind of data structures as JSON for the same kind of data interchange purposes. Data can be encoded in XML in several ways. The most expansive form using tag pairs results in a much larger representation than JSON, but if data is stored in attributes and 'short tag' form where the closing tag is replaced with '/>', the representation is often about the same size as JSON or just a little larger. If the data is compressed using an algorithm like gzip, there is little difference because compression is good at saving space when a pattern is repeated.

XML also has the concept of schema. This permits strong typing, user-defined types, predefined tags, and formal structure, allowing for formal validation of an XML stream in a portable way. Similarly, there is an IETF draft proposal for a schema system for JSON.^[45]

XML supports comments, but JSON does not.^[46]

Samples

JSON sample

  "firstName": "John",  "lastName": "Smith",  "age": 25,  "address": {    "streetAddress": "21 2nd Street",    "city": "New York",    "state": "NY",    "postalCode": "10021"  },  "phoneNumber": [    {      "type": "home",      "number": "212 555-1234"    },    {      "type": "fax",      "number": "646 555-4567"    }  ],  "gender": {    "type": "male"  }

}

Both of the following examples carry the same kind of information as the JSON example above in different ways. More [https://codeblogmoney.com/json-example-with-data-types-including-json-array/ JSON Examples].

YAML sample

The JSON code above is also entirely valid YAML. YAML also offers an alternative syntax intended to be more human-accessible by replacing nested delimiters like {}, [], and " marks with off-side indentation.^[44]

firstName: John

lastName: Smith

age: 25

address:

  streetAddress: 21 2nd Street  city: New York  state: NY  postalCode: '10021'

phoneNumber:

gender:

XML samples

The properties can also be serialized using attributes instead of tags:

• Gravitational physics
• Gravitational Potential
• Gravitational pull
• Gravitational Radiation
• Gravitational radiation
• Gravitational Redshift
• Gravitational shielding
• Gravitational slingshot
• Gravitational time delay
• Gravitational Time Dilation
• Gravitational tractor
• Gravitational two-body problem
• Gravitational wave
• Gravitational Wave
• Gravitational wave antennas
• Gravitational-wave astronomy
• Gravitational wave background
• Gravitational wave observatory
• Gravitational-wave observatory
• Gravitational wave radiation
• Gravitational Waves
• Gravitational zoology
• Gravitation (astronomy)
• Gravitation (book)
• Gravitation of the Moon