LDEV-6070 add lucee.formUrlAsStruct.bracket.notation

Author: zspitzer

core/src/main/java/lucee/runtime/type/scope/ScopeSupport.java

@@ -23,6 +23,7 @@
 import java.util.List;
 
 import lucee.commons.io.log.LogUtil;
+import lucee.commons.io.SystemUtil;
 import lucee.commons.lang.StringUtil;
 import lucee.commons.net.URLDecoder;
 import lucee.commons.net.URLItem;
@@ -55,6 +56,7 @@ public abstract class ScopeSupport extends StructImpl implements Scope {
 	private static int _id = 0;
 	private int id = 0;
 	private static final byte[] EMPTY = "".getBytes();
+	private static final boolean BRACKET_NOTATION_ENABLED = Caster.toBooleanValue(SystemUtil.getSystemPropOrEnvVar("lucee.formUrlAsStruct.bracket.notation", null), true);
 
 	/**
 	 * Field <code>isInit</code>
@@ -189,19 +191,25 @@ protected void fillDecoded(URLItem[] raw, String encoding, boolean scriptProtece
 			}
 
 			if (formUrlAsStruct && (name.indexOf('.') != -1 || name.indexOf('[') != -1)) {
-				List<String> segments = parseFormUrlName(name);
-
-				if (segments == null || segments.isEmpty()) {
-					// Malformed brackets or no segments, treat as literal key
+				// If bracket notation is disabled and the name contains brackets, treat as literal
+				if (!BRACKET_NOTATION_ENABLED && name.indexOf('[') != -1) {
 					_fill(this, name, value, true, scriptProteced, sameAsArray);
 				}
 				else {
-					// Process segments into nested structure
-					Struct parent = this;
-					for (int j = 0; j < segments.size() - 1; j++) {
-						parent = _fill(parent, segments.get(j), new CastableStruct(Struct.TYPE_LINKED), false, scriptProteced, sameAsArray);
+					List<String> segments = parseFormUrlName(name);
+
+					if (segments == null || segments.isEmpty()) {
+						// Malformed brackets or no segments, treat as literal key
+						_fill(this, name, value, true, scriptProteced, sameAsArray);
+					}
+					else {
+						// Process segments into nested structure
+						Struct parent = this;
+						for (int j = 0; j < segments.size() - 1; j++) {
+							parent = _fill(parent, segments.get(j), new CastableStruct(Struct.TYPE_LINKED), false, scriptProteced, sameAsArray);
+						}
+						_fill(parent, segments.get(segments.size() - 1), value, true, scriptProteced, sameAsArray);
 					}
-					_fill(parent, segments.get(segments.size() - 1), value, true, scriptProteced, sameAsArray);
 				}
 			}
 			else {

core/src/main/java/resource/setting/sysprop-envvar.json

@@ -327,6 +327,15 @@
 		"type": "boolean",
 		"default": false
 	},
+	{
+		"sysprop": "lucee.formUrlAsStruct.bracket.notation",
+		"envvar": "LUCEE_FORMURLASSTRUCT_BRACKET_NOTATION",
+		"desc": "Controls whether form and URL parameters with bracket notation (e.g., user[name]=foo) are parsed into nested structs when formUrlAsStruct is enabled. When true (default), bracket notation like user[name] is parsed as user.name. When false, bracket notation is treated as literal keys for backwards compatibility",
+		"category": "application",
+		"type": "boolean",
+		"introduced": "7.1",
+		"default": true
+	},
 	{
 		"sysprop": "lucee.full.null.support",
 		"envvar": "LUCEE_FULL_NULL_SUPPORT",

test/tickets/LDEV5934.cfc

@@ -5,7 +5,7 @@ component extends="org.lucee.cfml.test.LuceeTestCase" labels="ajax,form,url" {
 	}
 
 	function run( testResults, testBox ) {
-		describe( "LDEV-6070: Support bracket notation in form/URL parameters", function() {
+		describe( "Bracket notation in form/URL parameters", function() {
 
 			it( "should parse simple bracket notation into nested struct", function() {
 				var result = _internalRequest(
@@ -201,6 +201,65 @@ component extends="org.lucee.cfml.test.LuceeTestCase" labels="ajax,form,url" {
 			});
 
 		});
+
+		describe( "Array notation with [] suffix (existing functionality)", function() {
+
+			it( "should handle tags[] with struct format (array value)", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: {
+						"tags[]": [ "java", "cfml", "lucee" ]
+					}
+				);
+				expect( result.filecontent ).toInclude( "tags=java,cfml,lucee" );
+			});
+
+			it( "should handle tags[] with query string format (multiple params)", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: "tags[]=java&tags[]=cfml&tags[]=lucee"
+				);
+				expect( result.filecontent ).toInclude( "tags=java,cfml,lucee" );
+			});
+
+			it( "should handle single value with tags[]", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: "tags[]=lucee"
+				);
+				expect( result.filecontent ).toInclude( "tags=lucee" );
+			});
+
+			it( "should handle nested array notation user[tags][]", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: "user[tags][]=foo&user[tags][]=bar"
+				);
+				expect( result.filecontent ).toInclude( "user.tags=foo,bar" );
+			});
+
+			it( "should handle deeply nested array notation user[prefs][tags][]", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: "user[prefs][tags][]=foo&user[prefs][tags][]=bar"
+				);
+				expect( result.filecontent ).toInclude( "user.prefs.tags=foo,bar" );
+			});
+
+		});
+
+		describe( "Original reported issue from forum", function() {
+
+			it( "should handle userData[name] and userData[sellerID] from jQuery post", function() {
+				var result = _internalRequest(
+					template: "#uri#/test.cfm",
+					forms: "userData[name]=John&userData[sellerID]=12345"
+				);
+				expect( result.filecontent ).toInclude( "userData.name=John" );
+				expect( result.filecontent ).toInclude( "userData.sellerID=12345" );
+			});
+
+		});
 	}
 
 	private string function createURI( string calledName ) {