geode-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bruce Schuchardt (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (GEODE-3923) Provide whitelist/blacklist capability for java serialization
Date Tue, 05 Dec 2017 23:01:00 GMT

     [ https://issues.apache.org/jira/browse/GEODE-3923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Bruce Schuchardt resolved GEODE-3923.
-------------------------------------
    Resolution: Fixed

> Provide whitelist/blacklist capability for java serialization
> -------------------------------------------------------------
>
>                 Key: GEODE-3923
>                 URL: https://issues.apache.org/jira/browse/GEODE-3923
>             Project: Geode
>          Issue Type: New Feature
>          Components: docs
>            Reporter: Bruce Schuchardt
>             Fix For: 1.4.0
>
>
> I would like to be able to restrict what classes of objects Geode will allow to be deserialized
via Java's ObjectInputStream in clients and servers.  Something similar to the mechanism recently
added to the JRE (http://openjdk.java.net/jeps/290) would be pretty cool.  Geode would have
to whitelist its own stuff, of course, so I don't have to deal with it.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message