Skip to content

Jackson 3 Support Renders Proxy callbacks property #18077

@rwinch

Description

@rwinch

jackson-databind 3.0.0 renders callbacks property from Spring CGLIB Proxy instances. This means that objects that are secured using Spring Security's method security will have additional properties rendered.

See the disabled test at core/src/test/java/org/springframework/security/authorization/AuthorizationAdvisorProxyFactoryTests.java for a reproducer

See FasterXML/jackson-databind#5354

Metadata

Metadata

Assignees

Labels

in: coreAn issue in spring-security-coretype: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions