jenkinsci / jenkinsci/junit-plugin

[JENKINS-21207] Invalid XML character in RESTful API output.

Open
#951 2 comments 0 reactions 0 assignees View on GitHub
component:junit-plugin imported-jira-issue priority:major resolution:unresolved
Dominant language
Java
Stars
87
Forks
351
Avg merge
1d 19h
Merged PRs (30d)
2

Description

I was building a maven project (jenkins 1.544 actually) on Jenkins and one of the tests printed an invalid XML characted to stdout. This causes Jenkins to work with malformed XML document when the problematic output is present in the API response.

When visiting following url:

http://localhost:8080/job/jenkins/1/org.jenkins-ci.main$jenkins-test-harness/testReport/api/xml

browser shows "XML Parsing Error: not well-formed" error.

And if I try to filter the XML via xpath parameter:

http://localhost:8080/job/jenkins/1/org.jenkins-ci.main$jenkins-test-harness/testReport/api/xml?xpath=//fooo

Following exception is thrown ("Oops!" page):

java.io.IOException: Failed to do XPath/wrapper handling. Turn on FINER logging to view XML.

	at hudson.model.Api.doXml(Api.java:154)

	at sun.reflect.GeneratedMethodAccessor235.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

	at java.lang.reflect.Method.invoke(Method.java:601)

	at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298)

	at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161)

	at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96)

	at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:120)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:210)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:668)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:248)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:631)

	at org.kohsuke.stapler.Stapler.service(Stapler.java:225)

	at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)

	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494)

	at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:96)

	at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:88)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)

	at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76)

	at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:46)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474)

	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499)

	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)

	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533)

	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)

	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)

	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428)

	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)

	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)

	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)

	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)

	at org.eclipse.jetty.server.Server.handle(Server.java:370)

	at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489)

	at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:949)

	at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1011)

	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)

	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)

	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)

	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668)

	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)

	at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)

	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)

	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)

	at java.lang.Thread.run(Thread.java:722)

Caused by: org.dom4j.DocumentException: Error on line 74407 of document  : An invalid XML character (Unicode: 0x1b) was found in the element content of the document. Nested exception: An invalid XML character (Unicode: 0x1b) was found in the element content of the document.

	at org.dom4j.io.SAXReader.read(SAXReader.java:482)

	at org.dom4j.io.SAXReader.read(SAXReader.java:365)

	at hudson.model.Api.doXml(Api.java:111)

	... 70 more

Caused by: org.xml.sax.SAXParseException; lineNumber: 74407; columnNumber: 22; An invalid XML character (Unicode: 0x1b) was found in the element content of the document.

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:198)

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:177)

	at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:441)

	at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:368)

	at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(XMLScanner.java:1388)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2854)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:607)

	at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:116)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:488)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:835)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764)

	at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:123)

	at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1210)

	at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:568)

	at org.dom4j.io.SAXReader.read(SAXReader.java:465)

	... 72 more

I have managed to work aroud this for my use case by removing the invalid characters from the API response before processing the XML locally. But it is quite inconvenient.

---
Originally reported by jsenko, imported from: Invalid XML character in RESTful API output.


  • status: Open
  • priority: Major
  • component(s): junit-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 2
  • imported: 2025-11-26

Raw content of original issue

I was building a maven project (jenkins 1.544 actually) on Jenkins and one of the tests printed an invalid XML characted to stdout. This causes Jenkins to work with malformed XML document when the problematic output is present in the API response.

When visiting following url:




http://localhost:8080/job/jenkins/1/org.jenkins-ci.main$jenkins-test-harness/testReport/api/xml





browser shows "XML Parsing Error: not well-formed" error.

And if I try to filter the XML via xpath parameter:




http://localhost:8080/job/jenkins/1/org.jenkins-ci.main$jenkins-test-harness/testReport/api/xml?xpath=//fooo





Following exception is thrown ("Oops!" page):




java.io.IOException: Failed to do XPath/wrapper handling. Turn on FINER logging to view XML.

	at hudson.model.Api.doXml(Api.java:154)

	at sun.reflect.GeneratedMethodAccessor235.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

	at java.lang.reflect.Method.invoke(Method.java:601)

	at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:298)

	at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:161)

	at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:96)

	at org.kohsuke.stapler.MetaClass$1.doDispatch(MetaClass.java:120)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:210)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:668)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$12.dispatch(MetaClass.java:390)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:248)

	at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)

	at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)

	at org.kohsuke.stapler.Stapler.invoke(Stapler.java:631)

	at org.kohsuke.stapler.Stapler.service(Stapler.java:225)

	at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)

	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:686)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1494)

	at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:96)

	at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:88)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)

	at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76)

	at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:46)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1482)

	at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81)

	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1474)

	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499)

	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)

	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533)

	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)

	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)

	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428)

	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)

	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)

	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)

	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)

	at org.eclipse.jetty.server.Server.handle(Server.java:370)

	at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:489)

	at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:949)

	at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1011)

	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)

	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)

	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)

	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668)

	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)

	at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)

	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)

	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)

	at java.lang.Thread.run(Thread.java:722)

Caused by: org.dom4j.DocumentException: Error on line 74407 of document  : An invalid XML character (Unicode: 0x1b) was found in the element content of the document. Nested exception: An invalid XML character (Unicode: 0x1b) was found in the element content of the document.

	at org.dom4j.io.SAXReader.read(SAXReader.java:482)

	at org.dom4j.io.SAXReader.read(SAXReader.java:365)

	at hudson.model.Api.doXml(Api.java:111)

	... 70 more

Caused by: org.xml.sax.SAXParseException; lineNumber: 74407; columnNumber: 22; An invalid XML character (Unicode: 0x1b) was found in the element content of the document.

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:198)

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:177)

	at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:441)

	at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:368)

	at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(XMLScanner.java:1388)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2854)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:607)

	at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:116)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:488)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:835)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764)

	at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:123)

	at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1210)

	at com.sun.org.apache.xerces.internal.jaxp.SAXParserImpl$JAXPSAXParser.parse(SAXParserImpl.java:568)

	at org.dom4j.io.SAXReader.read(SAXReader.java:465)

	... 72 more





I have managed to work aroud this for my use case by removing the invalid characters from the API response before processing the XML locally. But it is quite inconvenient.

Contributor guide

Open the contributing guide

Research direction

Start at hudson.model.Api.doXml, identified in the stack trace, and reproduce the REST API request shown in the report with test output containing Unicode 0x1b. Determine how the generated XML handles invalid characters and verify that the API response remains well-formed and XPath filtering no longer fails.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.