com.hazelcast.nio

Class SerializationClassNameFilter

java.lang.Object

com.hazelcast.nio.SerializationClassNameFilter

All Implemented Interfaces:

ClassNameFilter

public final class SerializationClassNameFilter
extends Object
implements ClassNameFilter

Implementation of basic protection against untrusted deserialization. It holds blacklist and whitelist with classnames and package names.

See Also:

filter(String)

Constructor Summary

Constructors

Constructor and Description
SerializationClassNameFilter(JavaSerializationFilterConfig config)

Method Summary

Modifier and Type	Method and Description
void	filter(String className) Throws SecurityException if the given class name appears on the blacklist or does not appear on a non-empty whitelist.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SerializationClassNameFilter

public SerializationClassNameFilter(JavaSerializationFilterConfig config)

Method Detail

filter

public void filter(String className)
            throws SecurityException

Throws SecurityException if the given class name appears on the blacklist or does not appear on a non-empty whitelist.

Specified by:

filter in interface ClassNameFilter

Parameters:

className - class name to check

Throws:

SecurityException - if the classname is not allowed for deserialization