Disallow duplicate keys in JsonReader

Author: vy

log4j-kit/src/main/java/org/apache/logging/log4j/kit/json/JsonReader.java

@@ -299,6 +299,10 @@ private Map<String, Object> readObject() {
                         final String message = String.format(
                                 "was expecting an object key at index %d: %s", readTokenStartIndex, readToken);
                         throw new IllegalArgumentException(message);
+                    } else if (object.containsKey(key)) {
+                        final String message =
+                                String.format("found duplicate object key at index %d: %s", readTokenStartIndex, key);
+                        throw new IllegalArgumentException(message);
                     }
                 } else {
                     expectDelimiter(Delimiter.OBJECT_END, readToken);

log4j-kit/src/test/java/org/apache/logging/log4j/kit/json/JsonReaderTest.java

@@ -25,6 +25,7 @@
 import org.assertj.core.api.Assertions;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.CsvSource;
 import org.junit.jupiter.params.provider.ValueSource;
 
 class JsonReaderTest {
@@ -236,6 +237,7 @@ void test_invalid_array_end_3() {
     void test_valid_objects() {
         test("{}", Collections.emptyMap());
         test("{\"foo\":\"bar\"}", Collections.singletonMap("foo", "bar"));
+        test("{\"x\":{\"x\": \"x\"}}", Collections.singletonMap("x", Collections.singletonMap("x", "x")));
     }
 
     @Test
@@ -301,6 +303,21 @@ void test_invalid_object_key() {
                 .hasMessage("was expecting an object key at index 13: ARRAY_END");
     }
 
+    @ParameterizedTest
+    @CsvSource(
+            value = {
+                "a|7|{\"a\":1,\"a\":2}",
+                "a|13|{\"a\":1,\"b\":2,\"a\":3}",
+                "c|24|{\"a\":1,\"b\":{\"c\":2,\"d\":3,\"c\":4}}"
+            },
+            delimiter = '|')
+    void test_conflicting_object_key_1(final String key, final int index, final String json) {
+        Assertions.assertThatThrownBy(() -> JsonReader.read(json))
+                .as("key=`%s`, index=%d, json=`%s`", key, index, json)
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessage("found duplicate object key at index %d: %s", index, key);
+    }
+
     @Test
     @SuppressWarnings("DoubleBraceInitialization")
     public void test_nesting() {