[JENKINS-32428] Escape xml and json outputs in REST API - fix 2 (#123)

[JENKINS-32428] Escape xml and json outputs in REST API - fix 2 (#120)
jenkinsci · Jun 29, 2017 · df82446 · df82446
1 parent 1b9811e
commit df82446
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/jenkinsci/plugins/envinject/EnvInjectVarList.java b/src/main/java/org/jenkinsci/plugins/envinject/EnvInjectVarList.java
@@ -140,7 +140,7 @@ private String escapeXml(String xml) {
     }
 
     private String escapeJson(String json) {
-        return json.replace("\"", "\\\"").replace("\\", "\\\\");
+        return json.replace("\\", "\\\\").replace("\"", "\\\"");
     }
 
     //TODO: Throw errors in responses?