踩坑jackson - fastjson问题太多,漏洞太多因此转向jackson

2,139 阅读1分钟

背景

fastjson最近漏洞频频,上班的时候不断被要求升级,因此都在转向jackson

基本用法

maven依赖

        <!--jackson-->
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-databind</artifactId>
            <version>2.5.0</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-annotations</artifactId>
            <version>2.5.0</version>
        </dependency>
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-core</artifactId>
            <version>2.5.0</version>
        </dependency>

基本使用

    @Test
    public void testJackson() throws IOException {
        Map<String,String> map = new HashMap<String,String>();
        ObjectMapper objectMapper = new ObjectMapper();
        map.put("a","aaaa");
        map.put("b","bbbb");
        System.out.println("*** step1: 把map转成json ***");
        String jsonStr = objectMapper.writeValueAsString(map);
        System.out.println(jsonStr);

        System.out.println("*** step2: 把string json转成 ***");
        ObjectMapper mapper = new ObjectMapper();
        JsonNode rootNode = mapper.readTree(jsonStr);
        System.out.println("获取值:" + rootNode.get("a"));

    }