Remo Liechti created SLING-12304:
------------------------------------

             Summary: Broken backwards compatibility: out of order json object
                 Key: SLING-12304
                 URL: https://issues.apache.org/jira/browse/SLING-12304
             Project: Sling
          Issue Type: Bug
    Affects Versions: Commons JSON 2.0.26
            Reporter: Remo Liechti


The fix of CVE-2022-47937 introduced an invalid backwards compatibility for the 
order in jsonobject.

New behaviour: has the keys unordered, as JsonObject uses a HashMap.

Old behaviour: Kept insertion order of keys as JsonObject used LinkedHashMap.

To no break existing users of the library, reestablish the old behaviour.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to