bug如下，非法json串，也能被正常解析，未报错
public static void main(String[] args) { String errorJson = "[{\"a\":1}{\"b\":2}null undefined 676]"; System.out.println(JSONObject.parseArray(errorJson)); // [{"a":1},{"b":2},null,null,676] }
i7uaboj41#
找到了一个关联的测试用例，使用的非法json array(数字中间有空格)，为何会默认允许呢，是出于什么目的吗? @wenshao
fastjson/src/test/java/com/alibaba/json/bvt/parser/DefaultExtJSONParserTest_4.java
Lines 17 to 33 in 8697461
| | publicvoidtest_0() throwsException { || | List<?> res =Arrays.asList(1, 2, 3); || | String[] tests = { "[1,2,3]", "[1,,2,3]", "[1,2,,,3]", "[1 2,,,3]", "[1 2 3]", "[1, 2, 3,,]", "[,,1, 2, 3,,]", }; || | || | for (String t : tests) { || | DefaultJSONParser ext =newDefaultJSONParser(t); || | ext.config(Feature.AllowArbitraryCommas, true); || | List extRes = ext.parseArray(Object.class); || | Assert.assertEquals(res, extRes); || | || | DefaultJSONParser basic =newDefaultJSONParser(t); || | basic.config(Feature.AllowArbitraryCommas, true); || | List basicRes =newArrayList(); || | basic.parseArray(basicRes); || | Assert.assertEquals(res, basicRes); || | } || | } |
1条答案
按热度按时间i7uaboj41#
找到了一个关联的测试用例，使用的非法json array(数字中间有空格)，为何会默认允许呢，是出于什么目的吗? @wenshao
fastjson/src/test/java/com/alibaba/json/bvt/parser/DefaultExtJSONParserTest_4.java
Lines 17 to 33 in 8697461
| | publicvoidtest_0() throwsException { |
| | List<?> res =Arrays.asList(1, 2, 3); |
| | String[] tests = { "[1,2,3]", "[1,,2,3]", "[1,2,,,3]", "[1 2,,,3]", "[1 2 3]", "[1, 2, 3,,]", "[,,1, 2, 3,,]", }; |
| | |
| | for (String t : tests) { |
| | DefaultJSONParser ext =newDefaultJSONParser(t); |
| | ext.config(Feature.AllowArbitraryCommas, true); |
| | List extRes = ext.parseArray(Object.class); |
| | Assert.assertEquals(res, extRes); |
| | |
| | DefaultJSONParser basic =newDefaultJSONParser(t); |
| | basic.config(Feature.AllowArbitraryCommas, true); |
| | List basicRes =newArrayList(); |
| | basic.parseArray(basicRes); |
| | Assert.assertEquals(res, basicRes); |
| | } |
| | } |