Left-pad as a service

Re:Left-pad as a service by bflesch on Thursday March 24, 2016 @03:46PM (#11355838)

I get an error

  {"message": "Could not parse request body into json: Unexpected character (\'o\' (code 111)): was expecting comma to separate OBJECT entries\n at [Source: [B@6859f1ef; line: 2, column: 22]"}

when using double quotes. It seems some JSON parsing fails. Not sure if this can be exploited, so I wanted to let you know.

Demo link: https://api.left-pad.io/?str=%22;

[ Parent | on HN ]

Re:Left-pad as a service by adam-ff on Thursday March 24, 2016 @10:57PM (#11358233)

I get an error changing the example request from 68 to 67 characters:

https://api.left-pad.io/?str=paddin%27%20oswalt&len=67&ch=@ {"message": "Could not parse request body into json: Unrecognized character escape \'\'\' (code 39)\n at [Source: [B@38ac0021; line: 2, column: 21]"}

[ Parent | on HN ]