GithubStar/fastjson
1
0
Fork 0
mirror of https://github.com/alibaba/fastjson.git synced 2026-10-29 06:06:50 +08:00
Code Issues Packages Projects Releases Wiki Activity
3,964 Commits 25 Branches 135 Tags
1.2.84
Commit Graph
3964 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Shaojin Wen 72553ed7c6 build: disable javadoc doclint for modern JDK builds 1.2.84 2026-07-29 15:24:25 +08:00
Shaojin Wen 6ac7847b25 1.2.84 release: add central-publishing plugin, bump version 2026-07-29 15:21:03 +08:00
Shaojin Wen 73675f6a87 build: restore junit test dependency (as in 1.2.84 init) 2026-07-29 15:02:56 +08:00
Shaojin Wen ad353ff71e fix: strengthen autoType type name validation and whitelist verification 
Backport of fastjson2 #7703 to 1.2.83:

- Reject type names containing URL-special characters (: and !) in
  ParserConfig.checkAutoType and TypeUtils.loadClass, so a non-class-name
  string (e.g. a jar: URL) never reaches the class loader.
- Verify the accept name text after a whitelist hash match: maintain a
  parallel acceptNameSet alongside acceptHashCodes so a hash collision
  alone cannot whitelist a type name. Accept names are hashed with $
  normalized to ., matching the rolling hash in checkAutoType.
- An accept prefix no longer covers ClassLoader/DataSource/RowSet gadget
  base types; only an accept entry naming the type in full is an explicit
  opt-in. Prefix matches are loaded without populating the class mapping
  cache, otherwise the denied class would be served from the cache later
  in the same call.
- Never cache in the final loadClass of checkAutoType: previously a deny
  class rejected by the blacklist was still cached, so a second
  checkAutoType call for the same name returned it without any blacklist
  check. The accepted paths already call TypeUtils.addMapping explicitly.
 2026-07-29 15:02:55 +08:00
shaojin.wensj 26f13f84fd 1.2.83 1.2.83 2022-05-23 08:55:52 +08:00
shaojin.wensj 8f3410f81c bug fix for autotype 2022-05-06 15:18:39 +08:00
shaojin.wensj cd3c2de696 improved jdk8 java.time support 2022-05-02 16:47:11 +08:00
shaojin.wensj c63866eaca remove unused import 2022-05-02 16:46:26 +08:00
shaojin.wensj 35db4adad7 bug fix for autoType 2022-05-02 14:16:19 +08:00
温绍锦 3f009e10a6 Merge pull request #4085 from hengyunabc/fix_setAccessible 
fix InaccessibleObjectException in jdk17. #4077
 2022-04-20 14:19:12 +08:00
hengyunabc dd3de5f84b fix InaccessibleObjectException in jdk17. #4077 2022-04-20 14:16:38 +08:00
温绍锦 a234f9abba Merge pull request #4084 from alibaba/revert-4078-master 
Revert "fix InaccessibleObjectException in jdk17. #4077"
 2022-04-20 13:26:33 +08:00
温绍锦 0814909139 Revert "fix InaccessibleObjectException in jdk17. #4077" 2022-04-20 13:26:23 +08:00
温绍锦 ab82d0baca Merge pull request #4078 from hengyunabc/master 
fix InaccessibleObjectException in jdk17. #4077
 2022-04-20 09:09:42 +08:00
hengyunabc 483228ad68 add release config 2022-04-18 15:58:06 +08:00
hengyunabc d083cb2234 release arthas 1.2.80-fix 2022-04-18 15:00:36 +08:00
hengyunabc c04ceb9bc7 fix InaccessibleObjectException in jdk17. #4077 2022-04-18 13:13:48 +08:00
shaojin.wensj e900eae722 fix ci.yaml, remove windows 2022-04-17 18:21:21 +08:00
shaojin.wensj f56b5d895f 1.2.80 pom.xml 1.2.80 2022-03-24 09:18:45 +08:00
shaojin.wensj 7bd661dc4c update pom.xml test dependency 2022-03-22 13:13:08 +08:00
温绍锦 9c9e855d23 Merge pull request #4037 from alibaba/dependabot/maven/net.minidev-json-smart-2.4.5 
Bump json-smart from 2.4.1 to 2.4.5
 2022-03-22 13:09:30 +08:00
温绍锦 514d421233 Merge pull request #4058 from Koooooo-7/feat-getOrDefault 
feat: JSONObject getOrDefault.
 2022-03-21 20:19:59 +08:00
shaojin.wensj aa71e753d8 JSONField.unwrapped support List Field 2022-03-21 20:18:43 +08:00
Koy 39bc3cb12a feat: JSONObject getOrDefault. 2022-03-21 14:34:40 +08:00
dependabot[bot] a73bf2506b Bump json-smart from 2.4.1 to 2.4.5 
Bumps [json-smart](https://github.com/netplex/json-smart-v2) from 2.4.1 to 2.4.5.
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](https://github.com/netplex/json-smart-v2/compare/2.4.1...2.4.5)

---
updated-dependencies:
- dependency-name: net.minidev:json-smart
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-11 03:48:54 +00:00
温绍锦 e14b1e4a2c Merge pull request #4025 from matteobaccan/master 
Removed double semicolon
 2022-02-09 09:22:51 +08:00
Matteo Baccan 6841ca7910 Removed double semicolon 
Hi

I have removed a double semicolon at the end of one line

ciao
matteo
 2022-01-24 20:46:25 +01:00
高铁 6460f65759 1.2.79 release 1.2.79 2021-12-19 20:32:40 +08:00
高铁 9130f8e78e bug fix for JSONReader.handleResovleTask 2021-12-19 20:30:53 +08:00
高铁 f33474b4c6 bug fix for MethodInheritanceComparator 2021-12-19 20:30:29 +08:00
高铁 b1b7a68198 bug fixed for MethodInheritanceComparator 2021-12-16 16:27:47 +08:00
高铁 869746101f bug fixed for Set[] 2021-10-12 18:42:45 +08:00
温绍锦 93d8c01e90 Merge pull request #3875 from YunLemon/Modify_Travis_1 
Improve Travis CI build Performance
 2021-08-29 18:00:01 +08:00
温绍锦 69c0d2aa16 Merge pull request #3886 from RobberPhex/fix-for-modularity 
修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp
 2021-08-29 16:50:11 +08:00
luyanbo 751291fc5e 修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp 2021-08-29 16:37:28 +08:00
温绍锦 1da6cf57ac Merge pull request #3885 from alibaba/revert-3878-origin 
Revert "修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp"
 2021-08-29 15:59:06 +08:00
温绍锦 8b02d16b8d Revert "修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp" 2021-08-29 15:58:26 +08:00
温绍锦 0b269eb6b2 Merge pull request #3878 from RobberPhex/origin 
修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp
 2021-08-29 15:44:17 +08:00
luyanbo f10d080d45 修复jdk9模块化导致的NoClassDefFoundError: java/sql/Timestamp 2021-08-29 14:05:53 +08:00
luyanbo c5695ab27d use GitHub Actions 2021-08-29 14:05:47 +08:00
高铁 aab3a1bb10 add github Java CI 2021-08-29 12:40:54 +08:00
高铁 91eaa954c7 Merge branch 'master' of https://github.com/alibaba/fastjson 2021-08-29 11:13:41 +08:00
高铁 84835dd3cf bug fixed for set list 1.2.78 2021-08-29 11:03:47 +08:00
高铁 b183861694 bug fixed for JSONObject/JSONArray.equals 2021-08-23 16:49:28 +08:00
Chen Zhang 3d3becde32 Improve Travis CI build Performance 2021-08-18 21:50:21 +08:00
高铁 5271d86fc4 improved jsonpath 2021-07-17 18:51:43 +08:00
高铁 4a51ad4d09 improved blacklist 2021-07-17 18:51:07 +08:00
温绍锦 6e956d2c45 Merge pull request #3530 from MengdiGao/fix-JSONPath_reverse_test 
Fix flaky test JSONPath_reverse_test
 2021-07-10 13:47:00 +08:00
温绍锦 433398d5fd Merge pull request #3570 from MengdiGao/fix-test-Issue3082 
Fix 3 flaky tests caused by Map ordering assumption
 2021-07-10 13:44:09 +08:00
温绍锦 23070b2ccd Merge pull request #3538 from hulog/issue3521 
fixed issue3521
 2021-07-10 13:33:06 +08:00