[FELIX-6371] JSONConfigurationWriter does not escape backslash and other chars

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Inventory-1.0.6, webconsole-4.6.0
• Fix Version/s: webconsole-4.6.2, inventory-1.1.0
• Component/s: Inventory, Web Console
• Assignee: Carsten Ziegeler
• Reporter: Volo Myhal
• Created: 14/Dec/20 21:04
• Updated: 13/Jun/21 08:58
• Resolved: 14/Jan/21 12:30

Description

JSONConfigurationWriter.write method currently escapes/handles only three input characters: dblquote, \n and \r.

As a result, it produces invalid JSON strings, for example when Windows path is present in /system/console/status-slingsettings/, which caused JSON parsers to fail.

It should escape the backslash and other characters according to [1].

[0] https://github.com/apache/felix-dev/blob/master/inventory/src/main/java/org/apache/felix/inventory/impl/helper/JSONConfigurationWriter.java#L117

[1] https://greenbytes.de/tech/webdav/rfc8259.html#rfc.section.7