ClojureCLR v2.12 Release Notes

  • The new clojure.edn namespace reads edn (http://edn-format.org) data, and should be used for reading data from untrusted sources.

    Clojure's core read* functions can evaluate code, and should not be used to read data from untrusted sources. As of 1.5, *read-eval* 👌 supports a documented set of thread-local bindings, see the doc string for details.

    *read-eval*'s default can be set to false by setting a system property:

    -Dclojure.read.eval=false