{"action":"created","issue":{"url":"https://api.github.com/repos/alibaba/fastjson/issues/1755","repository_url":"https://api.github.com/repos/alibaba/fastjson","labels_url":"https://api.github.com/repos/alibaba/fastjson/issues/1755/labels{/name}","comments_url":"https://api.github.com/repos/alibaba/fastjson/issues/1755/comments","events_url":"https://api.github.com/repos/alibaba/fastjson/issues/1755/events","html_url":"https://github.com/alibaba/fastjson/issues/1755","id":303026570,"number":1755,"title":"自定义反序列化问题","user":{"login":"cai3178940","id":12594166,"avatar_url":"https://avatars2.githubusercontent.com/u/12594166?v=4","gravatar_id":"","url":"https://api.github.com/users/cai3178940","html_url":"https://github.com/cai3178940","followers_url":"https://api.github.com/users/cai3178940/followers","following_url":"https://api.github.com/users/cai3178940/following{/other_user}","gists_url":"https://api.github.com/users/cai3178940/gists{/gist_id}","starred_url":"https://api.github.com/users/cai3178940/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cai3178940/subscriptions","organizations_url":"https://api.github.com/users/cai3178940/orgs","repos_url":"https://api.github.com/users/cai3178940/repos","events_url":"https://api.github.com/users/cai3178940/events{/privacy}","received_events_url":"https://api.github.com/users/cai3178940/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-07T09:38:58Z","updated_at":"2018-04-28T02:48:52Z","closed_at":null,"author_association":"NONE","body":"**我想在反序列化的时候，针对String字段嵌入过滤XSS的逻辑：**\r\n\r\n```\r\npublic class XSSFastJsonDeserializer extends StringCodec {\r\n    @Override\r\n    public <T> T deserialze(DefaultJSONParser parser, Type type, Object fieldName) {\r\n        Object obj = super.deserialze(parser, type, fieldName);\r\n        if(obj!=null){\r\n            String value = obj.toString();\r\n            if(StringUtils.isNotBlank(value)) {\r\n                obj = XSSUtil.clean(value);\r\n            }\r\n        }\r\n        return (T)obj;\r\n    }\r\n\r\n}\r\n```\r\n但是只有部分String字段进入了上面的逻辑，太奇怪了"},"comment":{"url":"https://api.github.com/repos/alibaba/fastjson/issues/comments/385134465","html_url":"https://github.com/alibaba/fastjson/issues/1755#issuecomment-385134465","issue_url":"https://api.github.com/repos/alibaba/fastjson/issues/1755","id":385134465,"user":{"login":"yyhan","id":3831253,"avatar_url":"https://avatars3.githubusercontent.com/u/3831253?v=4","gravatar_id":"","url":"https://api.github.com/users/yyhan","html_url":"https://github.com/yyhan","followers_url":"https://api.github.com/users/yyhan/followers","following_url":"https://api.github.com/users/yyhan/following{/other_user}","gists_url":"https://api.github.com/users/yyhan/gists{/gist_id}","starred_url":"https://api.github.com/users/yyhan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yyhan/subscriptions","organizations_url":"https://api.github.com/users/yyhan/orgs","repos_url":"https://api.github.com/users/yyhan/repos","events_url":"https://api.github.com/users/yyhan/events{/privacy}","received_events_url":"https://api.github.com/users/yyhan/received_events","type":"User","site_admin":false},"created_at":"2018-04-28T02:48:52Z","updated_at":"2018-04-28T02:48:52Z","author_association":"NONE","body":"禁用 asm 特性试试"}}
{"actor":{"display_login":"yyhan"}}