[WW-4041] JSONValidationInterceptor and quotes in message

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.3.14
• Fix Version/s: 2.3.20
• Component/s: Plugin - JSON
• Assignee: Lukasz Lenart
• Reporter: mael le guével
• Created: 09/Apr/13 09:06
• Updated: 24/Aug/17 04:58
• Resolved: 02/Jan/14 21:28

Description

Hello,
There is a problem with org.apache.struts2.json.JSONValidationInterceptor
This class is using StringEscapeUtils.escapeEcmaScript(String) to escape the generated JSON string.
The problem is that StringEscapeUtils.escapeEcmaScript escapes the apostrophes. Some JSON implementations accept the escaped apostrophes but some other don't and they are not able to parse the JSON.
I think there should be at least an option to disable apostrophe escaping. But as I believe escaping apostrophe is not part of the JSON specifications, the best would be to not allow apostrophe escaping.
As an example, here is a JSON string generated by the JSON plugin :

{
    "fieldErrors": {
        "password": [
            "Password isn\'t correct"
        ]
    }
}

If you test it on http://jsonlint.com/, it says the syntax is incorrect.

Thanks.

See the original question on the Struts User ML

Issue Links

• depends upon: LANG-797 StringEscapeUtils.escapeJson