Closed JohnTimm closed 3 years ago
@JohnTimm @lukasj
JsonReaferFactory#getConfigInUse()
must return all configuration properties it recognized.FORBID_DUPLICATE_KEYS
is better naming than ALLOW_DUPLICATE_KEYS
, because the property does not exist in the configuration properties by default and such default state means allow duplicate keys. @JohnTimm @lukasj
JsonReaderFactory#getConfigInUse()
must return all configuration properties it recognized.
I have updated the code to pass the configuration object into JsonReaderFactoryImpl
(in a similar fashion to JsonGeneratorFactoryImpl
).
- I feel
FORBID_DUPLICATE_KEYS
is better naming thanALLOW_DUPLICATE_KEYS
, because the property does not exist in the configuration properties by default and such default state means allow duplicate keys.
I renamed ALLOW_DUPLICATE_KEYS
to FORBID_DUPLICATE_KEYS
and updated the logic accordingly. Please see my latest commit.
Make sure that the copyright year is updated to 2020 in all files you changed.
Updated copyright date on JsonObjectBuilderImpl
. Please see my latest commit.
@lukasj @m0mus Is there a chance for this PR to make it into the next release candidate?
Make sure that the copyright year is updated to 2020 in all files you changed.
@m0mus Your requested changes have been addressed. What do we need to do to move this PR forward?
@m0mus Hi Dmitry. Is there anything holding this PR out? It looks like John has made all the requested changes.
@lukasj @m0mus This has been sitting here for months. Please let me know if more needs to be done before it can be merged.
We did not want this in 2.0.0 and currently waiting for master to open up for integrations (expect ~2-3 weeks)
We did not want this in 2.0.0 and currently waiting for master to open up for integrations (expect ~2-3 weeks)
Sounds good. Thanks for the quick response! I appreciate it.
@lukasj Now that Jakarta EE 8 has shipped, where do we stand on getting this PR pulled into master?
Bumped into this interesting article and it reminded me that we've been waiting on this pull request for 9 months: https://labs.bishopfox.com/tech-blog/an-exploration-of-json-interoperability-vulnerabilities
@lukasj Everything is done through JsonObjectBuilder now so that the behavior should be consistent. Please take a look at my recent commits. We'd like to get this functionality merged sooner than later.
Signed-off-by: John T.E. Timm johntimm@us.ibm.com