-
Bug
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
None
We are forking snakeyaml 1.33 to apply some fixes which make snakeyaml behave "safer" in default configuration. It's gonna refuse to parse tags that are used as hints for which class to instantiate when deserializing YAML content (a parsing exception is going to be thrown when a tag is encountered).
Resteasy needs to disable this stricter behavior so that it's able to parse YAML annotated with tags.
Resteasy already contains whitelisting mechanism (TypeSafeConstructor) to vet which classes are allowed to be instantiated.
- is related to
-
JBEAP-24642 (7.4.z) Resteasy test failures with RESTEASY009000: Failed to decode Yaml
- Closed
- mentioned on