<!-- If you need to report a security issue please visit https://github.com/apache/dubbo/security/policy --> Currently using loadAs to parse http message, need to add unit test ensure no CVE issue. as with JSON, not to enable any object deserialization.
Currently using loadAs to parse http message, need to add unit test ensure no CVE issue.
as with JSON, not to enable any object deserialization.