写在前面,有感而发
上个月,XS 开源库被曝运营者恶意植入后门,虽然与 Java 关系不是很大,但是其所象征的 “开源=免费+安全” 已经变成 “开源=白嫖” 了
事件的来龙去脉可以在网上查看,总的来说就是 XS 库的作者无力维护,来了个人积极提 PR 同时“逼宫”作者,最终将这个人加入了社区运营者,最终让他有了机会
说到底,开源就像是用爱发电,没有收入和赞助,大部分开源作者都是难以为继,如 Python 的 request 库和 LayUI
就这样吧
一、现象
项目开启了自动刷新 Nacos 配置,但是无法刷新配置,并且每隔一段时间报错:
org.springframework.boot.context.properties.bind.BindException: Failed to bind properties under 'spring.datasource.druid.xxxxxxx' to javax.sql.DataSource
at org.springframework.boot.context.properties.bind.Binder.handleBindError(Binder.java:363)
at org.springframework.boot.context.properties.bind.Binder.bind(Binder.java:323)
at org.springframework.boot.context.properties.bind.Binder.bind(Binder.java:308)
at org.springframework.boot.context.properties.bind.Binder.bind(Binder.java:238)
at org.springframework.boot.context.properties.bind.Binder.bind(Binder.java:225)
at org.springframework.boot.context.properties.ConfigurationPropertiesBinder.bind(ConfigurationPropertiesBinder.java:90)
at org.springframework.boot.context.properties.ConfigurationPropertiesBindingPostProcessor.bind(ConfigurationPropertiesBindingPostProcessor.java:89)
at org.springframework.boot.context.properties.ConfigurationPropertiesBindingPostProcessor.postProcessBeforeInitialization(ConfigurationPropertiesBindingPostProcessor.java:78)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyBeanPostProcessorsBeforeInitialization(AbstractAutowireCapableBeanFactory.java:415)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1786)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:406)
at org.springframework.cloud.context.properties.ConfigurationPropertiesRebinder.rebind(ConfigurationPropertiesRebinder.java:108)
at org.springfr