Guides
JSON ecosystem guides
Practical, technical guides on JSON Schema, JWT, JSONPath vs JMESPath, JSON vs YAML vs TOML, streaming parsers, security pitfalls, and compression. Each guide pairs with the JSONCraft tool that applies it in-browser.
Security
JSON Security Pitfalls — Prototype Pollution, DoS, and Parsing Attacks
Every JSON input is attacker-controlled until proven otherwise. Prototype pollution, parser DoS, deep nesting — the attacks that actually ship against JSON endpoints.
April 17, 2026
JWT Best Practices in 2026 — What to Use, What to Avoid
Modern JWT guidance: EdDSA over RS256, mandatory alg pinning, revocation strategies, and the footguns that keep shipping in production auth code.
April 17, 2026
Performance
JSON Compression Strategies — gzip, MessagePack, CBOR, and When Each Wins
JSON is text and it compresses beautifully. But sometimes you want a binary format instead. Here is when gzip is enough and when MessagePack or CBOR earns its keep.
April 17, 2026
Streaming JSON Parsers — Handling Arrays of a Million Records
You cannot JSON.parse a 5 GB file. Streaming JSON parsers process arrays one record at a time. Here is how oboe.js, stream-json, and ijson work in practice.
April 17, 2026
By Marco B. ·