You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@dolphinscheduler.apache.org by 肖杰宝 <xi...@xiaomi.com.INVALID> on 2020/09/09 03:36:42 UTC
In which DS release version will Fastjson be replaced with Jackson?
Hi guys,
I am a user of Dolphinscheduler. Due to ongoing security vulnerabilities in Fastjson, our company recently banned Fastjson completely. I know that Fastjson had been used in DolphinScheduler and someone has fixed the issue in the dev branch. So I'd like to ask, are you planning or considering replacing Fastjson in the next release version? We would like to continue using DolphinScheduler, but as you know, the company system security outweigh everything else. I hope to hear from you as soon as possible. Thank you!?
Xiao Jiebao
2020.09.09.
#/******本邮件及其附件含有小米公司的保密信息，仅限于发送给上面地址中列出的个人或群组。禁止任何其他人以任何形式使用（包括但不限于全部或部分地泄露、复制、或散发）本邮件中的信息。如果您错收了本邮件，请您立即电话或邮件通知发件人并删除本邮件！ This e-mail and its attachments contain confidential information from XIAOMI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient(s) is prohibited. If you receive this e-mail in error, please notify the sender by phone or email immediately and delete it!******/#
回复： In which DS release version will Fastjson be replaced with Jackson?
Posted by "xingchun.chen" <xi...@qq.com>.
good news
------------------ 原始邮件 ------------------
发件人: "dev" <dailidong66@gmail.com>;
发送时间: 2020年11月3日(星期二) 上午10:47
收件人: "dev"<dev@dolphinscheduler.apache.org>;
主题: Re: In which DS release version will Fastjson be replaced with Jackson?
dev branch has removed fastjson, for now we are merging the 1.3.3 to dev,
so it could be achieved soon
Best Regards
---------------
DolphinScheduler(Incubator) PPMC
Lidong Dai 代立冬
dailidong66@gmail.com
---------------
On Wed, Sep 9, 2020 at 6:52 PM lidong dai <dailidong66@gmail.com> wrote:
> hi ，
> maybe we plan to remove fastjson in version 1.4.0, but if you join us, I
> think we can speed up the process if nobody oppose. please add my
> wechat(510570367), when added, please tell me who you are, I think we can
> have a meeting to disscuss this question
>
>
>
> Best Regards
> ---------------
> DolphinScheduler(Incubator) PPMC
> Lidong Dai 代立冬
> dailidong66@gmail.com
> ---------------
>
>
> 肖杰宝 <xiaojiebao@xiaomi.com.invalid> 于2020年9月9日周三 下午6:31写道：
>
>> Hi guys,
>> I am a user of Dolphinscheduler. Due to ongoing security
>> vulnerabilities in Fastjson, our company recently banned Fastjson
>> completely. I know that Fastjson had been used in DolphinScheduler and
>> someone has fixed the issue in the dev branch. So I'd like to ask, are you
>> planning or considering replacing Fastjson in the next release version? We
>> would like to continue using DolphinScheduler, but as you know, the company
>> system security outweigh everything else. I hope to hear from you as soon
>> as possible. Thank you!?
>>
>>
>>
>> Xiao Jiebao
>>
>>
>> 2020.09.09.
>>
>>
>> #/******本邮件及其附件含有小米公司的保密信息，仅限于发送给上面地址中列出的个人或群组。禁止任何其他人以任何形式使用（包括但不限于全部或部分地泄露、复制、或散发）本邮件中的信息。如果您错收了本邮件，请您立即电话或邮件通知发件人并删除本邮件！
>> This e-mail and its attachments contain confidential information from
>> XIAOMI, which is intended only for the person or entity whose address is
>> listed above. Any use of the information contained herein in any way
>> (including, but not limited to, total or partial disclosure, reproduction,
>> or dissemination) by persons other than the intended recipient(s) is
>> prohibited. If you receive this e-mail in error, please notify the sender
>> by phone or email immediately and delete it!******/#
>>
>
Re: Re: In which DS release version will Fastjson be replaced with Jackson?
Posted by "jiny.li@foxmail.com" <ji...@foxmail.com>.
Great praise
jiny.li@foxmail.com
From: lidong dai
Date: 2020-11-03 10:47
To: dev
Subject: Re: In which DS release version will Fastjson be replaced with Jackson?
dev branch has removed fastjson, for now we are merging the 1.3.3 to dev,
so it could be achieved soon
Best Regards
---------------
DolphinScheduler(Incubator) PPMC
Lidong Dai 代立冬
dailidong66@gmail.com
---------------
On Wed, Sep 9, 2020 at 6:52 PM lidong dai <da...@gmail.com> wrote:
> hi ，
> maybe we plan to remove fastjson in version 1.4.0, but if you join us, I
> think we can speed up the process if nobody oppose. please add my
> wechat(510570367), when added, please tell me who you are, I think we can
> have a meeting to disscuss this question
>
>
>
> Best Regards
> ---------------
> DolphinScheduler(Incubator) PPMC
> Lidong Dai 代立冬
> dailidong66@gmail.com
> ---------------
>
>
> 肖杰宝 <xi...@xiaomi.com.invalid> 于2020年9月9日周三 下午6:31写道：
>
>> Hi guys,
>> I am a user of Dolphinscheduler. Due to ongoing security
>> vulnerabilities in Fastjson, our company recently banned Fastjson
>> completely. I know that Fastjson had been used in DolphinScheduler and
>> someone has fixed the issue in the dev branch. So I'd like to ask, are you
>> planning or considering replacing Fastjson in the next release version? We
>> would like to continue using DolphinScheduler, but as you know, the company
>> system security outweigh everything else. I hope to hear from you as soon
>> as possible. Thank you!?
>>
>>
>>
>> Xiao Jiebao
>>
>>
>> 2020.09.09.
>>
>>
>> #/******本邮件及其附件含有小米公司的保密信息，仅限于发送给上面地址中列出的个人或群组。禁止任何其他人以任何形式使用（包括但不限于全部或部分地泄露、复制、或散发）本邮件中的信息。如果您错收了本邮件，请您立即电话或邮件通知发件人并删除本邮件！
>> This e-mail and its attachments contain confidential information from
>> XIAOMI, which is intended only for the person or entity whose address is
>> listed above. Any use of the information contained herein in any way
>> (including, but not limited to, total or partial disclosure, reproduction,
>> or dissemination) by persons other than the intended recipient(s) is
>> prohibited. If you receive this e-mail in error, please notify the sender
>> by phone or email immediately and delete it!******/#
>>
>
Re: In which DS release version will Fastjson be replaced with Jackson?
Posted by lidong dai <da...@gmail.com>.
dev branch has removed fastjson, for now we are merging the 1.3.3 to dev,
so it could be achieved soon
Best Regards
---------------
DolphinScheduler(Incubator) PPMC
Lidong Dai 代立冬
dailidong66@gmail.com
---------------
On Wed, Sep 9, 2020 at 6:52 PM lidong dai <da...@gmail.com> wrote:
> hi ，
> maybe we plan to remove fastjson in version 1.4.0, but if you join us, I
> think we can speed up the process if nobody oppose. please add my
> wechat(510570367), when added, please tell me who you are, I think we can
> have a meeting to disscuss this question
>
>
>
> Best Regards
> ---------------
> DolphinScheduler(Incubator) PPMC
> Lidong Dai 代立冬
> dailidong66@gmail.com
> ---------------
>
>
> 肖杰宝 <xi...@xiaomi.com.invalid> 于2020年9月9日周三 下午6:31写道：
>
>> Hi guys,
>> I am a user of Dolphinscheduler. Due to ongoing security
>> vulnerabilities in Fastjson, our company recently banned Fastjson
>> completely. I know that Fastjson had been used in DolphinScheduler and
>> someone has fixed the issue in the dev branch. So I'd like to ask, are you
>> planning or considering replacing Fastjson in the next release version? We
>> would like to continue using DolphinScheduler, but as you know, the company
>> system security outweigh everything else. I hope to hear from you as soon
>> as possible. Thank you!?
>>
>>
>>
>> Xiao Jiebao
>>
>>
>> 2020.09.09.
>>
>>
>> #/******本邮件及其附件含有小米公司的保密信息，仅限于发送给上面地址中列出的个人或群组。禁止任何其他人以任何形式使用（包括但不限于全部或部分地泄露、复制、或散发）本邮件中的信息。如果您错收了本邮件，请您立即电话或邮件通知发件人并删除本邮件！
>> This e-mail and its attachments contain confidential information from
>> XIAOMI, which is intended only for the person or entity whose address is
>> listed above. Any use of the information contained herein in any way
>> (including, but not limited to, total or partial disclosure, reproduction,
>> or dissemination) by persons other than the intended recipient(s) is
>> prohibited. If you receive this e-mail in error, please notify the sender
>> by phone or email immediately and delete it!******/#
>>
>
Re: In which DS release version will Fastjson be replaced with Jackson?
Posted by lidong dai <da...@gmail.com>.
hi ，
maybe we plan to remove fastjson in version 1.4.0, but if you join us, I
think we can speed up the process if nobody oppose. please add my
wechat(510570367), when added, please tell me who you are, I think we can
have a meeting to disscuss this question
Best Regards
---------------
DolphinScheduler(Incubator) PPMC
Lidong Dai 代立冬
dailidong66@gmail.com
---------------
肖杰宝 <xi...@xiaomi.com.invalid> 于2020年9月9日周三 下午6:31写道：
> Hi guys,
> I am a user of Dolphinscheduler. Due to ongoing security
> vulnerabilities in Fastjson, our company recently banned Fastjson
> completely. I know that Fastjson had been used in DolphinScheduler and
> someone has fixed the issue in the dev branch. So I'd like to ask, are you
> planning or considering replacing Fastjson in the next release version? We
> would like to continue using DolphinScheduler, but as you know, the company
> system security outweigh everything else. I hope to hear from you as soon
> as possible. Thank you!?
>
>
>
> Xiao Jiebao
>
>
> 2020.09.09.
>
>
> #/******本邮件及其附件含有小米公司的保密信息，仅限于发送给上面地址中列出的个人或群组。禁止任何其他人以任何形式使用（包括但不限于全部或部分地泄露、复制、或散发）本邮件中的信息。如果您错收了本邮件，请您立即电话或邮件通知发件人并删除本邮件！
> This e-mail and its attachments contain confidential information from
> XIAOMI, which is intended only for the person or entity whose address is
> listed above. Any use of the information contained herein in any way
> (including, but not limited to, total or partial disclosure, reproduction,
> or dissemination) by persons other than the intended recipient(s) is
> prohibited. If you receive this e-mail in error, please notify the sender
> by phone or email immediately and delete it!******/#
>