apache/shenyu

[BUG] dubbo example deserialize failed

Closed this issue · 0 comments

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

Start dubbo example, initiate the following HTTP request

curl --location 'http://127.0.0.1:9195/dubbo/demo/batchSave' \
--header 'Content-Type: application/json' \
--data '{
    "dubboTestList":[
        {
            "id": "1",
            "name": "shenyu"
        }
    ]
}'

Error message: [Serialization Security] Serialized class com.google.gson.internal.LinkedTreeMap is not in allow list. Current mode is STRICT, will disallow to deserialize it by default. Please add it into security/serialize.allowlist or follow FAQ to configure it

dubbo doc: https://cn.dubbo.apache.org/zh-cn/overview/mannual/java-sdk/tasks/security/class-check/

Expected Behavior

No response

Steps To Reproduce

No response

Environment

ShenYu version(s):

Debug logs

No response

Anything else?

No response