Package org.infinispan.commons.configuration

Class ClassWhiteList

java.lang.Object

org.infinispan.commons.configuration.ClassWhiteList

public final class ClassWhiteList
extends Object

The ClassWhiteList maintains classes definitions either by name or regular expression and is used for permissioning.

By default it includes regular expressions from the system property "infinispan.deserialization.whitelist.regexps" and fully qualified class names from "infinispan.deserialization.whitelist.classes".

Classes are checked first against the set of class names, and in case not present each of the regular expressions are evaluated in the order supplied.

Since:

9.4

Constructor Summary

Constructors

Constructor	Description
ClassWhiteList()
ClassWhiteList(Collection<String> classes, List<String> regexps)
ClassWhiteList(List<String> regexps)

Method Summary

Modifier and Type	Method	Description
void	addClasses(Class<?>... classes)
void	addClasses(String... classes)
void	addRegexps(String... regexps)
boolean	isSafeClass(String className)
void	read(ClassWhiteList whiteList)

Constructor Detail

ClassWhiteList

public ClassWhiteList()

ClassWhiteList

public ClassWhiteList(List<String> regexps)

ClassWhiteList

public ClassWhiteList(Collection<String> classes,
                      List<String> regexps)

Method Detail

isSafeClass

public boolean isSafeClass(String className)

addClasses

public void addClasses(Class<?>... classes)

addClasses

public void addClasses(String... classes)

addRegexps

public void addRegexps(String... regexps)

read

public void read(ClassWhiteList whiteList)