Shell Almost Has a JSON Analogue

Up: Structured Data in Oil

The analogy to JSON is that a serialization format can be defined from a subset of the programming language syntax.

Since shell essentially only has strings, this is just a format that serializes strings in shell.

Let's introduce two requirements:

• It shouldn't be line-based, because then you can't store a newline in a string. We want stream multiple instances of this format over a pipe.
• We are also introducing the additional limitation that you don't want to invoke child processes to do it. Otherwise base64 would work. (JSON itself doesn't quite work because it can't represent arbitrary byte strings. See TSV Proposal`

Summary

Serialize with

printf '%q' "$mystring"   # hm not POSIX?  printf is a required builtin, but %q isn't mentioned

https://pubs.opengroup.org/onlinepubs/9699919799/utilities/printf.html

Parse with:

printf -v myvar '%b' "$untrusted_data"  # This should just create a string an not evaluate arbitrary code.

printf -v is obviously not

Dynamic assignment is another alternative:

declare a="myvar=$untrusted_data"
declare "$a"

Although I'm not sure this works in bash, because () might be special-cased for arrays. There is probably a hole for code execution, whereas I don't expect that for %b.