Skip to content

Unsafe use of CDATA for geojson or json data encoding #648

@gschwind

Description

@gschwind

Description

ComplexInput._json_data encode geojson to json using CDATA, but it's unsafe since geojson may use "]]>" inside string or key and CDATA forbid this.

Environment

  • operating system: all
  • Python version: all
  • PyWPS version: pywps-4.4
  • source/distribution
  • git clone
  • Debian
  • PyPI
  • zip/tar.gz
  • other (please specify):
  • web server
  • Apache/mod_wsgi
  • CGI
  • other (please specify):

Steps to Reproduce

Additional Information

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions