natas_hw
/
dubbo
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

`org.apache.dubbo.*` add serialization whitelist (#8423)

This commit is contained in:
haoyann 2021-08-05 19:04:18 +08:00 committed by GitHub
parent 1832ff5977
commit 100655a888
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
View File

@ -25,6 +25,7 @@ public class DefaultHessian2FactoryInitializer extends AbstractHessian2FactoryIn
protected SerializerFactory createSerializerFactory() {
Hessian2SerializerFactory hessian2SerializerFactory = new Hessian2SerializerFactory();
hessian2SerializerFactory.getClassFactory().allow(RuntimeException.class.getName());
hessian2SerializerFactory.getClassFactory().allow("org.apache.dubbo.*");
return hessian2SerializerFactory;
}
}

1
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
View File

@ -49,6 +49,7 @@ public class WhitelistHessian2FactoryInitializer extends AbstractHessian2Factory
}
}
serializerFactory.getClassFactory().allow(RuntimeException.class.getName());
serializerFactory.getClassFactory().allow("org.apache.dubbo.*");
return serializerFactory;
}