Code reviewHardcr-g259

Subject Insecure deserializationLevel Senior–Staff~35 minCommon in Code quality & review interviewsIndustries Software development

Question

Review this Java JSON config endpoint using Jackson.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewjava

1public class ConfigService {2    private final ObjectMapper mapper = new ObjectMapper();3 4    public ConfigService() {5        // Allow polymorphic config objects to round-trip by type6        mapper.enableDefaultTyping();7    }8 9    public Config load(String json) throws IOException {10        return mapper.readValue(json, Config.class);11    }12}13// json is the raw request body from POST /api/config

Run or narrate your approach, then ask the coach.