jackson-datatype-safe-number

Jackson bindings for safe-number-parser types.

You can add the SafeNumberModule to your ObjectMapper. When this is enabled, classes like SafeBigInteger will be serialized/deserialized in a similar way to their equivalents in the core Java runtime - but with validations enabled to help you avoid issues with malicious input.

import com.github.pjfanning.jackson.safenumber.SafeNumberModule;

ObjectMapper mapper = JsonMapper.builder().addModule(new SafeNumberModule()).build();

or

import com.github.pjfanning.jackson.safenumber.SafeNumberModule;

ObjectMapper mapper = new ObjectMapper();
mapper.registerModule(new SafeNumberModule());

Rationale

• safe-number-parser types will work with Jackson without SafeNumberModule
• this module fixes some shortcomings though - notably, Jackson (by default) treats the Number implementations in this lib as if they are doubles and therefore loses some precision and cannot handle numbers that are greater than Double.MAX_VALUE or less than Double.MIN_VALUE
• when SafeNumberModuleis registered, we take into account the Jackson StreamReadFeatues USE_FAST_BIG_NUMBER_PARSER and USE_FAST_DOUBLE_PARSER.

Releases

jackson-datatype-safe-number releases are in Maven Central. If you use Jackson 2.12, use the latest jackson-datatype-safe-number 2.12.x release. Likewise for Jackson 2.13 and 2.14 and 2.15.