Shaojin Wen comments

Results 738 comments of


                                            Shaojin Wen

请问1.1.XX版本有此漏洞嘛

https://github.com/alibaba/fastjson/wiki/security_update_20220523 如果担心兼容问题，可以考虑 1.2.8_noneautotype https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.8_noneautotype/

does fastjson-1.2.83 support jdk 1.5 (very old jdk version) ?

I have no JDK 5 environment, so I can't verify whether it is compatible you can try https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.8_noneautotype/

1.2.60 修复漏洞后报错 Caused by: com.alibaba.fastjson.JSONException: safeMode not support autoType :

用2.0.5试试看 ```xml com.alibaba fastjson 2.0.5 ```

fastjson 升级到 1.2.8 以上

升级到2.0版本试试看 https://github.com/alibaba/fastjson2/releases

包含Infinity的json数据，无法解析

https://oss.sonatype.org/content/repositories/snapshots/com/alibaba/fastjson/2.0.14-SNAPSHOT/ 已经支持，请用2.0.14-SNAPSHOT帮忙验证

1.2.79版本 safemode设置为true后，反序列化时对于部分@type依然支持

这个是忽略掉的，不会影响安全。同时推荐使用2.0.x版本 https://github.com/alibaba/fastjson2/releases

序列化中含有表达式，转换异常

https://oss.sonatype.org/content/repositories/snapshots/com/alibaba/fastjson/2.0.13-SNAPSHOT/ 问题已经修复，请用2.0.13-SNAPSHOT版本验证，2.0.13版本预计在9月12日前发布

从 1.2.69 升级到 1.2.83，@JSONField 行为存在差异

https://github.com/alibaba/fastjson2/releases 升级到2.0.x版本，使用非兼容API可以解决你的问题，如下： ```java import com.alibaba.fastjson2.annotation.JSONField; import com.alibaba.fastjson2.JSON; import lombok.Data; import org.junit.jupiter.api.Test; import static org.junit.Assert.assertEquals; public class Issue4266 { @Data public static class SomeModel { private String id; @JSONField(name = "some_value")...

怎么样全局配置将 Date 和 LocalDateTime 序列化为毫秒级的时间戳？

https://github.com/alibaba/fastjson2/releases/tag/2.0.12 升级到2.0.12版本试试看吧

UTC时区下，加了SerializerFeature.UseISO8601DateFormat后，时间反序列化失败的问题

https://github.com/alibaba/fastjson2/releases/tag/2.0.12 问题已经修复，请用2.0.12版本