| Ticket Hash: | 6c9b5514077fed34551f98e64c09a10dc2fc8e16 | |||
| Title: | JSON allows unescaped control characters in strings | |||
| Status: | Fixed | Type: | Code_Defect | |
| Severity: | Important | Priority: | Immediate | |
| Subsystem: | Unknown | Resolution: | Fixed | |
| Last Modified: | 2017-04-10 12:25:16 | |||
| Version Found In: | 3.18.0 | |||
| User Comments: | ||||
drh added on 2017-04-10 12:14:46:
(text/x-fossil-wiki)
The JSON spec requires that control characters are always escaped. However, the SQLite JSON1 extension allows unescaped control characters in input strings to the "json_valid()" function. | ||||