# JSON API parsing error, single quotes used for errors like "\['BAD CSRF'\]"

**URL:** https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869
**Category:** Bug
**Created:** [March 11, 2017, 4:28am UTC](https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869 "2017-03-11T04:28:22Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![vvanpo](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vvanpo/32/114112_2.png) [@vvanpo](https://meta.discourse.org/u/vvanpo)
#### Post date: [March 11, 2017, 4:28am UTC](https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869/1 "2017-03-11T04:28:22Z")

</div>

My JSON parser fails when retrieving certain errors, so far I’ve only expierenced it with “[‘BAD CSRF’]” being returned when using the /groups/{group\_id}/members.json endpoint (as single-quotes for string delimiters is improper JSON). Quick search in github revealed the following:

> <https://github.com/discourse/discourse/blob/122fb8025d23030019fb8897e678d44fd6571e73/app/assets/javascripts/discourse/lib/ajax.js.es6#L72>

> <https://github.com/discourse/discourse/blob/fdf749770bfbc868660cc37cf8e77ce57805b7fa/app/controllers/application_controller.rb#L32>

I imagine there might be some other areas with improper manually-formatted JSON as well.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [March 13, 2017, 1:42pm UTC](https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869/2 "2017-03-13T13:42:24Z")

</div>

Mind sending a PR through to fix both spots?

---

<div class="post-metadata">

### Author: ![vvanpo](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vvanpo/32/114112_2.png) [@vvanpo](https://meta.discourse.org/u/vvanpo)
#### Post date: [March 16, 2017, 11:49pm UTC](https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869/3 "2017-03-16T23:49:50Z")

</div>

[https://github.com/discourse/discourse/pull/4763](https://github.com/discourse/discourse/pull/4763)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [May 17, 2017, 2:35am UTC](https://meta.discourse.org/t/json-api-parsing-error-single-quotes-used-for-errors-like-bad-csrf/58869/4 "2017-05-17T02:35:13Z")

</div>