You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I encountered an exception which looks suspicious while transporting a large JSON payload over the eventbus. When the jackson library was updated to >= 2.15
Jackson now imposes default limits on encode/decode for security reasons. However there is no obvious way to address those exceptions being bubbled from:
thanks for reporting, the only way I think we can address configurability is using system properties to control that since this is a static declaration
Version
Which version(s) did you encounter this bug ?
Context
I encountered an exception which looks suspicious while transporting a large JSON payload over the eventbus. When the jackson library was updated to >= 2.15
The issue is related to: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15#processing-limits
Jackson now imposes default limits on encode/decode for security reasons. However there is no obvious way to address those exceptions being bubbled from:
https://github.com/eclipse-vertx/vert.x/blob/master/vertx-core/src/main/java/io/vertx/core/eventbus/impl/codecs/JsonObjectMessageCodec.java#L34
Do you have a reproducer?
Should throw a
DecodeException
which steam from the new settings:https://github.com/FasterXML/jackson-core/blob/2.19/src/main/java/com/fasterxml/jackson/core/StreamReadConstraints.java
Extra
A fix would be to have a way to control the JsonFactory here:
https://github.com/eclipse-vertx/vert.x/blob/master/vertx-core/src/main/java/io/vertx/core/json/jackson/JacksonCodec.java#L51
The text was updated successfully, but these errors were encountered: