Properly escape JS string passed to WebView, it was crashing before when single quote in payload (#42)

Author: ebariaux

ORLib/src/main/java/io/openremote/orlib/ui/OrMainActivity.kt

@@ -949,14 +949,11 @@ open class OrMainActivity : Activity() {
             var jsonString = mapper.writeValueAsString(data)
             LOG.info("Sending response to client: $jsonString")
 
-            // Double escape quotes (this is needed for browsers to be able to parse the response)
-            jsonString = jsonString.replace("\\\"", "\\\\\"")
-
             runOnUiThread {
                 binding.webView.evaluateJavascript(
                     String.format(
                         "OpenRemoteConsole._handleProviderResponse('%s')",
-                        jsonString
+                        jsonString.escapeForJavaScript()
                     ), null
                 )
             }
@@ -965,6 +962,16 @@ open class OrMainActivity : Activity() {
         }
     }
 
+    private fun String.escapeForJavaScript(): String {
+        return this
+            .replace("\\", "\\\\")
+            .replace("'", "\\'")
+            .replace("\"", "\\\"")
+            .replace("\n", "\\n")
+            .replace("\r", "\\r")
+            .replace("\t", "\\t")
+    }
+
     private fun onConnectivityChanged(connectivity: Boolean) {
         LOG.info("Connectivity changed: $connectivity")
         if (connectivity && !webViewIsLoading && !lastConnectivity) {