RFR 9: JEP 290: Filter Incoming Serialization Data
Roger.Riggs at Oracle.com
Wed Jul 20 13:30:06 UTC 2016
The use of filtering needs to be very intentional and so an
implementation should be required.
I don't expect there to be additional methods and if so a default for
checkInput could be added at that time.
On 7/19/2016 11:18 PM, Wang Weijun wrote:
> The ObjectInputFilter interface has only one method. Are we expecting more methods to be added later and maybe some people will only be interested in a new method? If yes, I suggest we provide a default implementation of the current method to return ALLOWED.
>> On Jul 19, 2016, at 10:02 PM, Roger Riggs <Roger.Riggs at oracle.com> wrote:
>> Please review the design, implementation, and tests of JEP 290: Filter Incoming Serialization Data
More information about the core-libs-dev