Http Fetcher: source url with JSON code marked as invalid

We do have an element that has its own validation, feeds_uri but is the validator there enough? I can easily feed it garbage. Maybe we can set #allowed_schemes in the $form['source']? That way it can be limited not to access any local resources or other funky things? I am not an expert in what should be limited.

That being said, OPs url should be encoded. I do not think the url form element as it stands is converting those characters to urlencoded, it is just validating it. Your url should look something like this in the text field:

http://newapi.omnicasa.com/1.8/OmnicasaService.svc/GetPropertyListXml?js...