jsonapi allows illegal attribute names about jsonapi HOT 2 CLOSED

This check will be done in Type.AddAttr instead, the Schema.Check function will remain as it is for now. A different problem are object attributes, because based on the specification member names of links and relationships are forbidden.

There are basically two possibilities here:

1. the result of GetZeroValue is checked to see if it is a map or struct and then its field names are checked. The problem is that a custom MarshalJSON function could exist, which actually converts illegal field names into valid names.

2. the result of GetZeroValue is converted to json and then unmarshalled into a map whose keys are checked. The problem is that one can't really predict how the marshaller will handle zero values, which means that illegal fields might slip through the validation when empty fields are omitted.

from jsonapi.

The implementing user is responsible for validating the member names of struct or map attributes.

from jsonapi.