fastjson 经常出漏洞问题 建议替换fastjson或者增加其他json库适配
Open
kind/discussion
- Dominant language
- Java
- Stars
- 23.1k
- Forks
- 8.1k
- PR merge metrics
- No merged PRs in 30d
Description
source的读取是可以自定义json库读取的 但是在sentinel-transport-common中是依赖fastjson的 这里能否替代掉 或者可适配其他json库
Contributor guide
Research direction
Start by inspecting the fastjson dependency and JSON-reading path in sentinel-transport-common, then compare it with the customizable source JSON reader mentioned in the issue. Done means the transport module has an agreed replacement or supported alternative JSON-library integration, with its compatibility and verification requirements documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, json
- Domain
- backend, security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100