项目启动提示：WARN | | io.fury.config.FuryBuilder | Class registration isn't forced, unknown classes can be deserialized. If the environment isn't secure, please enable class registration by `FuryBuilder#requireClassRegistration(true)` or configure ClassChecker by `ClassResolver#setClassChecker`
LiJinYu2024 opened this issue · 3 comments
Your question
项目启动提示：WARN | | io.fury.config.FuryBuilder | Class registration isn't forced, unknown classes can be deserialized. If the environment isn't secure, please enable class registration by FuryBuilder#requireClassRegistration(true) or configure ClassChecker by ClassResolver#setClassChecker
Your scenes
更新sofarpc版本后出现的这个提示
Your advice
windows11开发环境
Environment
- SOFARPC version: 5.12.0
- JVM version (e.g.
java -version): JDK21 - OS version (e.g.
uname -a): - Maven version: 3.9.6
- IDE version: IntelliJ IDEA 2023.2.4 (Community Edition)
新版的sofa有了新的序列化器，fury，这个是它的配置。意思是在你使用fury的时候，建议去配置黑白名单的功能，防止不安全的类被序列化/反序列化
From a compatibility perspective:
Whether the new version of SofaRpc defaults to using the Fury serializer. If it does, this should be prominently highlighted in the release notes (and I believe it shouldn't be the default without a change in major version).
If SofaRpc does not default to using the Fury serializer, then this warning should not be reported.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.