Comments (7)
By closing this issue without response, please understand this issue will be publicly disclosed without a fix.
from discovery.
public static <T> T fromYaml(String yaml, Class<T> clazz) {
Yaml snakeYaml = new Yaml();
return snakeYaml.loadAs(yaml, clazz);
}
If we change above code with
public static <T> T fromYaml(String yaml, Class<T> clazz) {
Yaml snakeYaml = new Yaml(new SafeConstructor());
return snakeYaml.loadAs(yaml, clazz);
}
It will impact function with following exception
Exception in thread "main" could not determine a constructor for the tag tag:yaml.org,2002:com.nepxion.discovery.common.entity.ConditionStrategy
in 'string', line 1, column 1:
service:
^
from discovery.
Then you need to specify an allowed list of classes that are safe to deserialize to
from discovery.
What YAML are you attempting to deserialize? Can you provide an example?
from discovery.
Please refer to the example with
from discovery.
Then you need to specify an allowed list of classes that are safe to deserialize to
Would you please give an example to set the allowed list?
from discovery.
from discovery.
Related Issues (20)
- 在spring-cloud异步场景下使用Hystrix情况下,调用服务出现空指针 HOT 5
- 想问一下,我能基于6.12版做开源吗? HOT 2
- 服务内部调用如何环境隔离 HOT 6
- 版本问题 HOT 1
- DiscoveryClientDecorator只有在版本偏好和版本故障转移打开后才有效么? HOT 1
- dependency scope setting issues
- gateway灰度在高版本springboot的时候已经不支持 HOT 1
- 基于gateway灰度方案,如果网关需要更新新功能,怎么动态更新网关? HOT 1
- Security contact for vulnerability report
- 请问服务间调用灰度支持Dubbo吗? HOT 1
- GHSL-2022-033_GHSL-2022-034: Remote Code Execution Vulnerability via SpEL Injection in Nepxion/Discovery - CVE-2022-23463, CVE-2022-23464 HOT 1
- 定时Job下全链路条件蓝绿发布如何配置 HOT 5
- 云原生环境下,以nacos为配置中心,项目正常和灰度的业务配置如何区分 HOT 3
- service层获取requst上下文时,优先从restStrategyContext获取,在没使用异步情况下,会不会有内存泄漏问题 HOT 5
- 请教如何异步通过feign指定n-d-version调用目标版本的微服务 HOT 1
- 是否可以实现云服务和本地服务的灰度&蓝绿 HOT 1
- Discovery gateway 整合到现有系统,nacos配置问题 HOT 2
- openfeign问题
- postman.json这个文件现在删除了吗?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from discovery.