add json sanitization

Author: JoaoJandre

plugins/hypervisors/kvm/pom.xml

@@ -72,6 +72,11 @@
             <artifactId>hash4j</artifactId>
             <version>0.29.0</version>
         </dependency>
+        <dependency>
+            <groupId>com.mikesamuel</groupId>
+            <artifactId>json-sanitizer</artifactId>
+            <version>1.2.3</version>
+        </dependency>
         <dependency>
             <groupId>com.linbit.linstor.api</groupId>
             <artifactId>java-linstor</artifactId>

plugins/hypervisors/kvm/src/main/java/com/cloud/hypervisor/kvm/resource/wrapper/LibvirtValidateKbossVmCommandWrapper.java

@@ -30,6 +30,7 @@
 import com.cloud.utils.script.Script;
 import com.google.gson.JsonObject;
 import com.google.gson.JsonParser;
+import com.google.json.JsonSanitizer;
 import org.apache.cloudstack.backup.ValidateKbossVmAnswer;
 import org.apache.cloudstack.backup.ValidateKbossVmCommand;
 import org.libvirt.Domain;
@@ -164,9 +165,10 @@ private String runScript(ValidateKbossVmCommand command, Domain vm) throws Libvi
         }
         logger.debug("Running validation script [{}] with arguments [{}] on dummy validation VM [{}].", script, arguments, vm.getName());
         String guestCommand = String.format(GUEST_EXEC_COMMAND, script, arguments);
+        String sanitizedGuestCommand = JsonSanitizer.sanitize(guestCommand);
         String execResult;
         try {
-            execResult = vm.qemuAgentCommand(guestCommand, command.getScriptTimeout(), 0);
+            execResult = vm.qemuAgentCommand(sanitizedGuestCommand, command.getScriptTimeout(), 0);
         } catch (LibvirtException ex) {
             return ex.getMessage();
         }