Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 366949 - Control Characters in Protocol-message can crash client
Summary: Control Characters in Protocol-message can crash client
Status: RESOLVED FIXED
Alias: None
Product: RAP
Classification: RT
Component: RWT (show other bugs)
Version: 1.5   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: 1.5 M5   Edit
Assignee: Project Inbox CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-12-16 10:13 EST by Tim Buschtoens CLA
Modified: 2012-01-02 05:21 EST (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Buschtoens CLA 2011-12-16 10:13:19 EST 
The JSON-Parser on the client will crash if the Protocol-Message contains certain control characters (like Escape/27/""). Tested on firefox 8 with native JSON parser.
Comment 1 Ivan Furnadjiev CLA 2012-01-02 05:21:46 EST 
The range of the controls characters defined in JSON RFC 4627 (http://www.ietf.org/rfc/rfc4627) is 0x0000 - 0x001f. Fixed by escaping these characters in JsonValue#escapeString.