MappedNamespaceConvention in the same packageDoubleItDoubleItResponseorg.apache.cxf.jaxrs.provider.json.JSONProvider#createReader(Class,InputStream,String):
Prevent use of depthProperties with badgerfish convention (not supported).NoSuchMethodError, else to Internal Server Error; and logs the error using SLF4J.SetPropertyAllowingMappedXMLInputFactory (controlling max string length in JSON keys and values)FIStaxInInterceptor to apply the StaxInEndingInterceptor to phase post-invoke instead of pre-invoke, in order to allow JAXBElementProvider
doUnmarshal(...) method, when called on a JAX-RS subresource operation invocation, to get the StAXDocumentParser created here.JSONProvider does not enforce JAX-RS (JSON in this case) depth control properties org.apache.cxf.stax.* (only innerElementCountThreshold is enforced and only affects
JSONObject key-value pairs, not JSONArray elements!), as of CXF 3.1.8.JSONObject input/output with configurable Consume/Produce media types and optional bufferingJSONTokener.JSONTokener that checks limits on JSON structures, such as arrays and strings, in order to mitigate content-level attacks.MappedNamespaceConvention, modified to fix issue with XML schema validation failing when something like xsi:type="tns:MyType" is used in the
JSON input ("Undeclared prefix 'tns'").JSONProviderMappedXMLInputFactory allowing setProperty(arg0, arg1) doing nothing, extended to fix setProperty() required by XML External Entity attack mitigation required by Findbugs in
createStreamReader(), and required for compatibility with JSONProvider.Copyright © 2012–2020. All rights reserved.