This is a bug in the Catalyst REST controller: Catalyst/Action/Serialize/JSONP.pm, which uses a "\w" regexp to test for validity, assuming that anything which doesn't match that is invalid.
I have never succeeded in getting my bugfixes applied to this module :-( I may have to fork yet more of it.
But in the mean time, I guess I could hack the copy on api-dev.
Do you have an idea of a ballpark ETA? I'm trying to balance the cost benefit of waiting vs developing my own request queue handler script. Best guess is fine :)
Fixed for api-dev by hacking the module locally.
Thank you sooooooo much Gerv, this was a huge time saver!
I'm going to call this FIXED. The upstream module isn't going to change <sigh>, and I'm hoping not to fork more of it. I've documented the limitation.
Actually, no. I may have to fork this module after all.
BzAPI is very much in maintenance mode and is being superseded by the BzAPI shim on top of the native Bugzilla REST API, and that native API itself. So this bug is not going to be fixed.