V2EX 4ra1n
 4ra1n's recent timeline updates
4ra1n

4ra1n

  安全工程师
V2EX member #674492, joined on 2024-02-02 11:44:15 +08:00
Today's activity rank 15599
8 S 93 B
4ra1n's recent replies
不错,拍的好看,一直想樱花季去一次日本,奈何长假都在五一和十一
我不后悔,花了所有的钱,买了一辆跑车。

因为带给我的情绪价值。
fastjson 有漏洞是因为反序列化太自由了,拓展性太强了

如果,你只允许,json 反序列化到 hashmap arraylist 自己从 hashmap 里一个个的 get k/v 设置 entity 属性,没有漏洞。fastjson 是允许自动反序列化到指定的 entity/pojo 类,而不是从 hashmap 手动搞过去,自动导致的漏洞。

漏洞的核心是,自动类型推断和实例化,自动调用 getter/setter
上学时候几乎所有零花钱全氪,工作之后,几百以内
来杭州临安吧,房价 1w 多,快速路+高速到余杭阿里总部半小时内,不堵车。
我做开源两个目的:

1. 我花时间精力,做了一些东西,我不想让这些技术成果埋没

2. 我的实力有限,思维定格,需要 github 上更多其他行业的开发大佬,一起完善

做开源几年我发现,只要我不图赚钱,完全开放代码,完善的文档,那么会有同样用爱发电的大佬愿意贡献
About     Help     Advertise     Blog     API     FAQ     Solana     5003 Online   Highest 6679       Select Language
创意工作者们的社区
World is powered by solitude
VERSION: 3.9.8.5 43ms UTC 05:38 PVG 13:38 LAX 22:38 JFK 01:38
Do have faith in what you're doing.
ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86