Feat #5: JsonReader does not allow unespaced control flow characters …

…in strict mode
marten-voorberg · Feb 24, 2023 · 45692b9 · 45692b9
1 parent a78764a
commit 45692b9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/gson/src/main/java/com/google/gson/stream/JsonReader.java b/gson/src/main/java/com/google/gson/stream/JsonReader.java
@@ -1021,7 +1021,9 @@ private String nextQuotedValue(char quote) throws IOException {
       while (p < l) {
         int c = buffer[p++];
 
-        if (c == quote) {
+        if (strict && c <= '\u001F') {
+          throw syntaxError("Unescaped control characters (\\u0000-\\u001F) are not allowed in strict mode.");
+        } else if (c == quote) {
           pos = p;
           int len = p - start - 1;
           if (builder == null) {