From 19175858102296d42b2e69764da6a54a731a9935 Mon Sep 17 00:00:00 2001
From: ExtReMLapin <3909752+ExtReMLapin@users.noreply.github.com>
Date: Tue, 5 Mar 2024 15:42:18 +0100
Subject: [PATCH] Prevent control characters from being served in json string
 (array)

---
 grammars/json_arr.gbnf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/grammars/json_arr.gbnf b/grammars/json_arr.gbnf
index ef53e77a0..31a3202f8 100644
--- a/grammars/json_arr.gbnf
+++ b/grammars/json_arr.gbnf
@@ -24,7 +24,7 @@ array  ::=
 
 string ::=
   "\"" (
-    [^"\\] |
+    [^"\\\x7F\x00-\x1F] |
     "\\" (["\\/bfnrt] | "u" [0-9a-fA-F] [0-9a-fA-F] [0-9a-fA-F] [0-9a-fA-F]) # escapes
   )* "\"" ws