Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 55DA1200D60 for ; Fri, 1 Dec 2017 21:20:05 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 54322160C06; Fri, 1 Dec 2017 20:20:05 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 9B3C4160BF4 for ; Fri, 1 Dec 2017 21:20:04 +0100 (CET) Received: (qmail 30580 invoked by uid 500); 1 Dec 2017 20:20:03 -0000 Mailing-List: contact issues-help@geode.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@geode.apache.org Delivered-To: mailing list issues@geode.apache.org Received: (qmail 30537 invoked by uid 99); 1 Dec 2017 20:20:03 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 01 Dec 2017 20:20:03 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 14FAA180859 for ; Fri, 1 Dec 2017 20:20:03 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -99.202 X-Spam-Level: X-Spam-Status: No, score=-99.202 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id LuoIJp4mPW9T for ; Fri, 1 Dec 2017 20:20:02 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id 767205FB8C for ; Fri, 1 Dec 2017 20:20:01 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id C237CE0E56 for ; Fri, 1 Dec 2017 20:20:00 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 41DE3255C1 for ; Fri, 1 Dec 2017 20:20:00 +0000 (UTC) Date: Fri, 1 Dec 2017 20:20:00 +0000 (UTC) From: "Dave Barnes (JIRA)" To: issues@geode.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (GEODE-3923) Provide whitelist/blacklist capability for java serialization MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 01 Dec 2017 20:20:05 -0000 [ https://issues.apache.org/jira/browse/GEODE-3923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dave Barnes updated GEODE-3923: ------------------------------- Component/s: docs > Provide whitelist/blacklist capability for java serialization > ------------------------------------------------------------- > > Key: GEODE-3923 > URL: https://issues.apache.org/jira/browse/GEODE-3923 > Project: Geode > Issue Type: New Feature > Components: docs, serialization > Reporter: Bruce Schuchardt > Fix For: 1.4.0 > > > I would like to be able to restrict what classes of objects Geode will allow to be deserialized via Java's ObjectInputStream in clients and servers. Something similar to the mechanism recently added to the JRE (http://openjdk.java.net/jeps/290) would be pretty cool. Geode would have to whitelist its own stuff, of course, so I don't have to deal with it. -- This message was sent by Atlassian JIRA (v6.4.14#64029)