search

TarsCloud / Tars

Tars is a high-performance RPC framework based on name service and Tars protocol, also integrated administration platform, and implemented hosting-service via flexible schedule.
BSD 3-Clause "New" or "Revised" License
9.8k stars 2.08k forks source link

What are the main reasons for ARS to replace fastjson with gson instead of Jackson? #659

Closed TARS-Question closed 4 years ago

TARS-Question commented 4 years ago

I think Jackson has similar security problems;

So I want to know it. Internal business will replace fastjson.

TARS-Answer commented 4 years ago

Google's JSON library is relatively stable, safe and adaptable. This follow-up will be abstracted into customization.

The biggest core point of choosing gson is that gson has no major problems since it came into being. The logic and neatness of the implementation from the code is also suitable. Of course, tarsjava still can't say which serialization tool to use. It should be used by users themselves. Gson is just a recommendation.

TARS-Answer commented 4 years ago

google的json库相对稳定安全，适应性广，这个后续会抽象成自定义吧。

选择gson的最大的核心点还是gson从它产生到现在没有重大的问题。在从代码的实现的逻辑和整洁度也适合。当然tarsjava这里还是不能说，规定用哪种序列化的工具。应该是需要使用者自己使用就好。gson也只是一个推荐哈。