Details
-
Bug
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
None
-
None
Description
We found that using the function StringEscapeUtils.unescapeHtml4 crashes if the argument is "�" and throws an IllegalArgumentException.
This happens because internally it calls the function NumericEntityUnescaper.translate and doesn't check if the value is bigger than 0x10FFFF (MAX_CODE_POINT) that is a check inside Character.toChar.
Maybe we need to check that the entity value is less than Char.MAX_CODE_POINT.
Attachments
Issue Links
- is duplicated by
-
LANG-1056 StringEscapeUtils.unescapeHtml4 java.lang.IllegalArgumentException
- Closed