activemq-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From build...@apache.org
Subject svn commit: r984338 - in /websites/production/activemq/content: cache/main.pageCache objectmessage.html
Date Thu, 31 Mar 2016 14:22:01 GMT
Author: buildbot
Date: Thu Mar 31 14:22:01 2016
New Revision: 984338

Log:
Production update by buildbot for activemq

Modified:
    websites/production/activemq/content/cache/main.pageCache
    websites/production/activemq/content/objectmessage.html

Modified: websites/production/activemq/content/cache/main.pageCache
==============================================================================
Binary files - no diff available.

Modified: websites/production/activemq/content/objectmessage.html
==============================================================================
--- websites/production/activemq/content/objectmessage.html (original)
+++ websites/production/activemq/content/objectmessage.html Thu Mar 31 14:22:01 2016
@@ -87,7 +87,7 @@
 <pre class="brush: java; gutter: false; theme: Default" style="font-size:12px;">-Dorg.apache.activemq.SERIALIZABLE_PACKAGES="*"</pre>
 </div></div><h3 id="ObjectMessage-Clients">Clients</h3><p>On
the client side, you need to have this same mechanism as malicious code can be deserialized
on <code>ObjectMessage.getObject()</code> call, compromising your application's
environment. You can use the same configuration mechanism on the broker and configure trusted
classes using system properties. However, this is usually not convenient in the client applications,
so in <strong>5.12.2</strong> and&#160;<strong>5.13.1</strong>
we introduced additional configuration mechanism using <code>ActiveMQConnectionFactory</code>.
There are two additional methods defined:</p><ul><li>The <code>setTrustedPackages()</code>
method allows you to set the list of trusted packages you want to be to unserialize, like</li></ul><div
class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent
pdl">
 <pre class="brush: java; gutter: false; theme: Default" style="font-size:12px;">ActiveMQConnectionFactory
factory = new ActiveMQConnectionFactory("tcp://localhost:61616");
-factory.setTrustedPackages(new ArrayList(Arrays.asList("org.apache.activemq.test,org.apache.camel.test")));</pre>
+factory.setTrustedPackages(new ArrayList(Arrays.asList("org.apache.activemq.test,org.apache.camel.test".split(","))));</pre>
 </div></div><ul><li>The&#160;<code>setTrustAllPackages()</code>
allows you to turn off security check and trust all classes. It's useful for testing purposes.</li></ul><div
class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent
pdl">
 <pre class="brush: java; gutter: false; theme: Default" style="font-size:12px;">ActiveMQConnectionFactory
factory = new ActiveMQConnectionFactory("tcp://localhost:61616");
 factory.setTrustAllPackages(true);</pre>



Mime
View raw message