This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko.git
The following commit(s) were added to refs/heads/main by this push:
new e6b61dbf43 jackson MINIMAL_CLASS setting is dangerous too (#3304)
e6b61dbf43 is described below
commit e6b61dbf4373ca799baa34ac9b7fddd2bd81a116
Author: PJ Fanning <[email protected]>
AuthorDate: Wed Jul 8 21:06:21 2026 +0100
jackson MINIMAL_CLASS setting is dangerous too (#3304)
---
docs/src/main/paradox/serialization-jackson.md | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/docs/src/main/paradox/serialization-jackson.md
b/docs/src/main/paradox/serialization-jackson.md
index b5d8fa5271..c4c4cef0a9 100644
--- a/docs/src/main/paradox/serialization-jackson.md
+++ b/docs/src/main/paradox/serialization-jackson.md
@@ -77,8 +77,8 @@ and disallowed for deserialization.
@@@ warning
-Don't use @javadoc[@JsonTypeInfo(use =
Id.CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo) or
@javadoc[ObjectMapper.enableDefaultTyping](com.fasterxml.jackson.databind.ObjectMapper#enableDefaultTyping--)
since that is a security risk
-when using @ref:[polymorphic types](#polymorphic-types).
+Don't use @javadoc[@JsonTypeInfo(use =
Id.CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo),
@javadoc[@JsonTypeInfo(use =
Id.MINIMAL_CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo)
+or
@javadoc[ObjectMapper.enableDefaultTyping](com.fasterxml.jackson.databind.ObjectMapper#enableDefaultTyping--)
since that is a security risk when using @ref:[polymorphic
types](#polymorphic-types).
@@@
@@ -156,8 +156,8 @@ when deserializing.
@@@ warning
-Don't use @javadoc[@JsonTypeInfo(use =
Id.CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo) or
@javadoc[ObjectMapper.enableDefaultTyping](com.fasterxml.jackson.databind.ObjectMapper#enableDefaultTyping--)
since that is a security risk
-when using polymorphic types.
+Don't use @javadoc[@JsonTypeInfo(use =
Id.CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo),
@javadoc[@JsonTypeInfo(use =
Id.MINIMAL_CLASS)](com.fasterxml.jackson.annotation.JsonTypeInfo)
+or
@javadoc[ObjectMapper.enableDefaultTyping](com.fasterxml.jackson.databind.ObjectMapper#enableDefaultTyping--)
since that is a security risk when using @ref:[polymorphic
types](#polymorphic-types).
@@@
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
