The GitHub Actions job "Java CI" on 
commons-lang.git/json-style-charsequence-escape has succeeded.
Run started by GitHub user alhudz (triggered by garydgregory).

Head commit for run:
9ba26881a5851be922f6ee0f5e4bb0d5f9865bfb / Alhuda Khan <[email protected]>
escape CharSequence values in ToStringStyle.JSON_STYLE

JsonToStringStyle.appendDetail(StringBuffer, String, Object) quotes and
escapes only String and Character values. Any other value whose
toString() is wrapped in {} or [] is appended raw, which is meant for
nested objects that already render as JSON. A StringBuilder or other
non-String CharSequence holding brace-wrapped text therefore went out
unescaped and could inject keys into the output. Treat every
CharSequence as a string value.

Report URL: https://github.com/apache/commons-lang/actions/runs/38797691544

With regards,
GitHub Actions via GitBox

Reply via email to