[brennebeck]

Here you go: https://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-j...

[Boulth]

The biggest pain point in these security guidelines is context. For example this Array override issue has been fixed in major browsers 11 years ago [0]. Unless someone codes for IE6 I'd consider this not a real problem.

[0]: https://johnresig.com/blog/re-securing-json/