Jackson 3.0.0 default for DeserializationFeature.FAIL_ON_TRAILING_TOKENS
#74
cowtowncoder
started this conversation in
Polls
Replies: 1 comment
-
|
Voted
... these, then security matters more these days. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
(part of #72 uber-Discussion)
As of Jackson 2.x,
DeserializationFeature.FAIL_ON_TRAILING_TOKENSdefaults tofalsefor backwards-compatibility. A suggestion has been made:FasterXML/jackson-databind#3406
to change it to
trueinstead, to help catch invalid content being sent.We cannot make the change in Jackson 2.x, but could change it for 3.0.0.
So let's see if there is consensus on whether to make proposed change.
7 votes ·
Beta Was this translation helpful? Give feedback.
All reactions