https://emadashi.com/tags/jstree/ Recent content in Tags/Jstree on Emad Alashi Hugo en Tue, 15 Jun 2010 14:42:23 +0000 https://emadashi.com/2010/06/happy-life-with-intuitive-api-in-smart-controls/ Tue, 15 Jun 2010 14:42:23 +0000 https://emadashi.com/2010/06/happy-life-with-intuitive-api-in-smart-controls/ <p>In this post I will show you an example of how smartly built controls and API’s can make the developers programming life extremely enjoyable, hopefully this example will urge you in giving such a smart effort when you build your own control or API.</p> <p>Lately I have been playing around with a very nice tree control based on jQuery called <a href="http://www.jstree.com/">jsTree</a>. One of the nice features is that it allows populating the tree through asynchronous calls with JSON data representation. In order to achieve that, you needed to provide the data by JSON special format suitable to the tree. This format, regrettably, is open to the JSON vulnerability <a href="http://haacked.com/">Phil Haack</a> talked about in his two posts <a href="http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx">here</a> and <a href="http://haacked.com/archive/2009/06/25/json-hijacking.aspx">here</a>.<br> So to avoid this vulnerability I had to change this default data format of the tree, at least until the very end of the data flow just before the tree populates the data, only then I can change it back to the default format, like the following:</p>