refs #1912 - fix missing Yaml LoaderOptions

swagger-api · Apr 18, 2023 · ba13af5 · ba13af5
1 parent 7ff9e99
commit ba13af5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/swagger-parser-v3/src/main/java/io/swagger/v3/parser/util/DeserializationUtils.java b/modules/swagger-parser-v3/src/main/java/io/swagger/v3/parser/util/DeserializationUtils.java
@@ -201,6 +201,11 @@ public static LoaderOptions buildLoaderOptions() {
             method.invoke(loaderOptions, options.getMaxYamlAliasesForCollections());
             method = LoaderOptions.class.getMethod("setAllowRecursiveKeys", boolean.class);
             method.invoke(loaderOptions, options.isYamlAllowRecursiveKeys());
+            method = LoaderOptions.class.getMethod("setAllowDuplicateKeys", boolean.class);
+            method.invoke(loaderOptions, false);
+            method = LoaderOptions.class.getMethod("setCodePointLimit", int.class);
+            method.invoke(loaderOptions, options.getMaxYamlCodePoints());
+
         } catch (ReflectiveOperationException e) {
             LOGGER.debug("using snakeyaml < 1.25, not setting YAML Billion Laughs Attack snakeyaml level protection");
         }