漏洞修复

pom.xml

@@ -103,7 +103,7 @@
 		<dependency>
 			<groupId>com.alibaba</groupId>
 			<artifactId>fastjson</artifactId>
-			<version>1.2.83</version>
+			<version>2.0.62</version>
 		</dependency>
 		<dependency>
 			<groupId>net.sf.json-lib</groupId>

src/main/java/com/metro/auth/platform/SpringBootForPlatformApplication.java

 package com.metro.auth.platform;
 
+import com.alibaba.fastjson.parser.ParserConfig;
 import com.metro.auth.platform.wxmessage.ApiConfig;
 import org.mybatis.spring.annotation.MapperScan;
 import org.springframework.boot.SpringApplication;
@@ -26,5 +27,9 @@ public class SpringBootForPlatformApplication extends SpringBootServletInitializ
 	public static void main(String[] args) {
 		ConfigurableApplicationContext context =  SpringApplication.run(SpringBootForPlatformApplication.class, args);
 		context.getBean(ApiConfig.class).ApiConfigInit(false);
+		boolean isSafe = ParserConfig.getGlobalInstance().isSafeMode();
+		System.out.println("fastjson SafeMode状态: " +
+				(isSafe ? "启用" : "未启用"));
 	}
 }
+

src/main/resources/fastjson2.properties

+fastjson2.parser.safeMode=true
\ No newline at end of file