alibaba / alibaba/Sentinel

fastjson 经常出漏洞问题 建议替换fastjson或者增加其他json库适配

Open
#1,522 9 comments 0 reactions 0 assignees View on GitHub
kind/discussion
Dominant language
Java
Stars
23.1k
Forks
8.1k
PR merge metrics
No merged PRs in 30d

Description

source的读取是可以自定义json库读取的 但是在sentinel-transport-common中是依赖fastjson的 这里能否替代掉 或者可适配其他json库

Contributor guide

Open the contributing guide

Research direction

Start by inspecting the fastjson dependency and JSON-reading path in sentinel-transport-common, then compare it with the customizable source JSON reader mentioned in the issue. Done means the transport module has an agreed replacement or supported alternative JSON-library integration, with its compatibility and verification requirements documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, json
Domain
backend, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.