gin/render at 6942b48b72e101460329609fc7a0f97502445377 - gin

mirror of https://github.com/gin-gonic/gin.git synced 2026-09-07 08:52:04 +08:00

History

ankit-songara 6942b48b72 fix(render): encode non-BMP runes as UTF-16 surrogate pairs in AsciiJSON

AsciiJSON escaped every non-ASCII rune with fmt.Appendf(buf, "\u%04x", r),
but %04x is a minimum width, not a fixed width. Runes outside the Basic
Multilingual Plane (e.g. emoji) need 5+ hex digits, so a single malformed
\uXXXXX token was written instead of a valid 4-digit JSON \u escape. The
output stayed syntactically valid JSON, so this was easy to miss, but a
decoder reads the first 4 hex digits as one character and treats the rest
as literal text, corrupting the value silently.

RFC 8259 §7 requires code points outside the BMP to be encoded as a UTF-16
surrogate pair. Use unicode/utf16.EncodeRune to produce the pair for those
runes while keeping the existing single-escape path for BMP characters.

Fixes #4688

2026-07-17 00:56:03 +05:30

bson.go

chore(binding): upgrade bson dependency to mongo-driver v2 (#4549 )

2026-02-27 23:20:01 +08:00

data.go

fix(render): write content length in Data.Render (#4206 )

2026-02-28 10:07:31 +08:00

html.go

ci(golangci-lint): update configuration and fix lint issues (#4247 )

2025-05-23 14:46:48 +08:00

json.go

fix(render): encode non-BMP runes as UTF-16 surrogate pairs in AsciiJSON