diff --git a/docs/modules/json.md b/docs/modules/json.md index 18157b6c..c3536473 100644 --- a/docs/modules/json.md +++ b/docs/modules/json.md @@ -5,6 +5,16 @@ label: json JSON serialization and deserialization module. +This module is not safe. You may not want to use it with untrusted data. +If you need a safe alternative, consider a 3rd-party library like `cjson`. + +You can override the json functions with: +```c +py_GlobalRef mod = py_getmodule("json"); +py_bindfunc(mod, "loads", _safe_json_loads); +py_bindfunc(mod, "dumps", _safe_json_dumps); +``` + #### Source code :::code source="../../include/typings/json.pyi" :::