Uploaded image for project: 'Struts 2'
  1. Struts 2
  2. WW-3545

JSONValidationInterceptor Returns Invalid "true" json. Do not put javascript comments around json

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • 2.2.1
    • 2.3.1
    • XML Validators
    • None
    • Important

    Description

      Many ui frameworks(JQuery for example) to a direct eval on the json. Jquery will report json response is invalid if the comments are left in.

      see http://jquery14.com/day-01/jquery-14

      Strict JSON parsing, using native JSON.parse (jQuery.ajax() Documentation, Commit 1, Commit 2, Commit 3)

      jQuery 1.3 and earlier used JavaScript's eval to evaluate incoming JSON. jQuery 1.4 uses the native JSON parser if available. It also validates incoming JSON for validity, so malformed JSON (for instance

      {foo: "bar"}

      ) will be rejected by jQuery in jQuery.getJSON and when specifying "json" as the dataType of an Ajax request.

      support material though
      http://stackoverflow.com/questions/244777/can-i-comment-a-json-file

      http://third-bit.com/blog/archives/1749.html
      a little off topic
      http://blog.getify.com/2010/06/json-comments/

      For fix:
      See lines sb.append("/*

      { "); ..... and sb.append("}

      */"); In method JSONValidationInterceptor.buildResponse and

      Also line response.getWriter().print("/* {} */") in doIntercept change that line to response.getWriter().print("{}");

      changed buildResponse Method below.
      Build response without comments (really a 2 line change)
      @SuppressWarnings("unchecked")
      protected String buildResponse(ValidationAware validationAware) {
      // should we use FreeMarker here?
      StringBuilder sb = new StringBuilder();
      sb.append("{ ");

      if (validationAware.hasErrors()) {
      // action errors
      if (validationAware.hasActionErrors())

      { sb.append("\"errors\":"); sb.append(buildArray(validationAware.getActionErrors())); }

      // field errors
      if (validationAware.hasFieldErrors()) {
      if (validationAware.hasActionErrors())
      sb.append(",");
      sb.append("\"fieldErrors\": {");
      Map<String, List<String>> fieldErrors = validationAware.getFieldErrors();
      for (Map.Entry<String, List<String>> fieldError : fieldErrors.entrySet())

      { sb.append("\""); // if it is model driven, remove "model." see WW-2721 String fieldErrorKey = fieldError.getKey(); sb.append(((validationAware instanceof ModelDriven) && fieldErrorKey.startsWith("model.")) ? fieldErrorKey .substring(6) : fieldErrorKey); sb.append("\":"); sb.append(buildArray(fieldError.getValue())); sb.append(","); }

      // remove trailing comma, IE creates an empty object, duh
      sb.deleteCharAt(sb.length() - 1);
      sb.append("}");
      }
      }

      sb.append("}");
      /*

      • response should be something like: { "errors": ["this", "that"],
      • "fieldErrors": { field1: "this", field2: "that" }

        }
        */
        return sb.toString();
        }

      Attachments

        Issue Links

          Activity

            People

              lukaszlenart Lukasz Lenart
              sutter2k Matthew Payne
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: