This is an automated email from the ASF dual-hosted git repository.

albumenj pushed a commit to branch 
dependabot/maven/com.alibaba.fastjson2-fastjson2-2.0.38
in repository https://gitbox.apache.org/repos/asf/dubbo.git


The following commit(s) were added to 
refs/heads/dependabot/maven/com.alibaba.fastjson2-fastjson2-2.0.38 by this push:
     new 8f33178c0f throws exception if ban
8f33178c0f is described below

commit 8f33178c0f53ddce3a29e594ee317591a0419043
Author: Albumen Kevin <[email protected]>
AuthorDate: Thu Aug 10 17:36:32 2023 +0800

    throws exception if ban
---
 .../common/serialize/fastjson2/Fastjson2SecurityManager.java   | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git 
a/dubbo-serialization/dubbo-serialization-fastjson2/src/main/java/org/apache/dubbo/common/serialize/fastjson2/Fastjson2SecurityManager.java
 
b/dubbo-serialization/dubbo-serialization-fastjson2/src/main/java/org/apache/dubbo/common/serialize/fastjson2/Fastjson2SecurityManager.java
index 32e477b2e3..158966309e 100644
--- 
a/dubbo-serialization/dubbo-serialization-fastjson2/src/main/java/org/apache/dubbo/common/serialize/fastjson2/Fastjson2SecurityManager.java
+++ 
b/dubbo-serialization/dubbo-serialization-fastjson2/src/main/java/org/apache/dubbo/common/serialize/fastjson2/Fastjson2SecurityManager.java
@@ -16,10 +16,6 @@
  */
 package org.apache.dubbo.common.serialize.fastjson2;
 
-import java.util.Map;
-import java.util.Set;
-import java.util.concurrent.ConcurrentHashMap;
-
 import org.apache.dubbo.common.logger.ErrorTypeAwareLogger;
 import org.apache.dubbo.common.logger.LoggerFactory;
 import org.apache.dubbo.common.utils.AllowClassNotifyListener;
@@ -31,6 +27,10 @@ import org.apache.dubbo.rpc.model.FrameworkModel;
 import com.alibaba.fastjson2.filter.ContextAutoTypeBeforeHandler;
 import com.alibaba.fastjson2.util.TypeUtils;
 
+import java.util.Map;
+import java.util.Set;
+import java.util.concurrent.ConcurrentHashMap;
+
 import static com.alibaba.fastjson2.util.TypeUtils.loadClass;
 import static 
org.apache.dubbo.common.constants.LoggerCodeConstants.PROTOCOL_UNTRUSTED_SERIALIZE_CLASS;
 import static org.apache.dubbo.common.utils.SerializeCheckStatus.STRICT;
@@ -115,7 +115,7 @@ public class Fastjson2SecurityManager implements 
AllowClassNotifyListener {
                     logger.error(PROTOCOL_UNTRUSTED_SERIALIZE_CLASS, "", "", 
msg);
                 }
 
-                return null;
+                throw new IllegalArgumentException(msg);
             }
 
             // 3. try load

Reply via email to