redis json 解析增加白名单

2025-03-19 11:02:07 +08:00 · 2025-03-19 11:02:07 +08:00 · 99d158f744
parent b6ba543fb7
commit 99d158f744
1 changed files with 1 additions and 1 deletions
--- a/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/constant/Constants.java
+++ b/bonus-common/bonus-common-core/src/main/java/com/bonus/common/core/constant/Constants.java
@ -121,7 +121,7 @@ public class Constants
    /**
     * 自动识别json对象白名单配置（仅允许解析的包名，范围越小越安全）
     */
-    public static final String[] JSON_WHITELIST_STR = { "org.springframework", "com.bonus" };
+    public static final String[] JSON_WHITELIST_STR = { "org.springframework", "com.bonus", "com.fasterxml.jackson.databind.node.NullNode" };

    /**
     * 定时任务白名单配置（仅允许访问的包名，如其他需要可以自行添加）