pywps
pywps copied to clipboard
Unsafe use of CDATA for geojson or json data encoding
Description
ComplexInput._json_data encode geojson to json using CDATA, but it's unsafe since geojson may use "]]>" inside string or key and CDATA forbid this.
Environment
- operating system: all
- Python version: all
- PyWPS version: pywps-4.4
- source/distribution
- [x] git clone
- [ ] Debian
- [ ] PyPI
- [ ] zip/tar.gz
- [ ] other (please specify):
- web server
- [x] Apache/mod_wsgi
- [ ] CGI
- [ ] other (please specify):