Custom provider sends invalid JSON when the input has quotes
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 72/100
Research direction
Start by locating how custom_format and custom_sprig values are inserted into the custom provider's JSON body. Reproduce with the quoted input from the issue, then check that quotes, backslashes, and newlines are escaped while the configured fields remain intact. Done means the generated body parses as valid JSON for those inputs.
Written by the indexing model from the issue text.
Description
Notify version:
dev
Current Behavior:
For a custom provider with a JSON body (custom_format such as {"text":"{{data}}"}), {{data}} and custom_sprig values are inserted without JSON escaping. A quote, backslash or newline in the input line gives invalid JSON or changes the fields of the body.
Expected Behavior:
Values written inside a JSON string are escaped, so the body is always valid JSON with the configured fields.
Steps To Reproduce:
- Configure a custom provider with
custom_format: {"text":"{{data}}"}. - Run
echo "a \"quoted\" value" | notify.
Anything else:
- Dominant language
- Go
- Stars
- 1.6k
- Forks
- 160
- Avg merge
- 3d 16h
- Merged PRs (30d)
- 5
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from projectdiscovery/notify
-
Difficulty 3/5 1-2 days Newbie friendliness 66/100
projectdiscovery/notify#566 ·
-
gotify: Gotify 3 tokens rejectedPossibly taken @dogancanbakir claimed this 10 days ago. OpenType: Bug
projectdiscovery/notify#562 · 1 assignee ·
-
bump Go toolchain for CVE-2026-111943Possibly taken @dogancanbakir claimed this 10 days ago. OpenType: Maintenance
projectdiscovery/notify#560 · 1 assignee ·
-
add notionPossibly taken A pull request linked to this issue is open or already merged. OpenType: Enhancement
Difficulty 5/5 Over a week Newbie friendliness 15/100
projectdiscovery/notify#474 ·
-
Remove default character limit on custom webhookMay be free again @RamanaReddy0M claimed this 799 days ago, and no pull request is open. OpenType: Bug
projectdiscovery/notify#412 · 6 comments · 1 assignee ·
All issues in projectdiscovery/notify
Similar issues
-
ux
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
evcc-io/evcc#35605 · 1 comment ·
Maintainers usually reply within 1 day
-
bug report
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
type:bug
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
nightgauge/nightgauge#2732 ·
Maintainers usually reply within 1 day
-
fix below CVEsOpenbug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 5 days
-
good first issue help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 78/100