Class ClassAllowList
- java.lang.Object
-
- org.infinispan.commons.configuration.ClassAllowList
-
- Direct Known Subclasses:
ClassWhiteList
public class ClassAllowList extends Object
TheClassAllowList
maintains classes definitions either by name or regular expression and is used for permissioning.By default it includes regular expressions from the system property "infinispan.deserialization.allowlist.regexps" and fully qualified class names from "infinispan.deserialization.allowlist.classes".
Classes are checked first against the set of class names, and in case not present each of the regular expressions are evaluated in the order supplied.
- Since:
- 9.4
-
-
Constructor Summary
Constructors Constructor Description ClassAllowList()
ClassAllowList(Collection<String> classes, List<String> regexps, ClassLoader classLoader)
ClassAllowList(List<String> regexps)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
addClasses(Class<?>... classes)
void
addClasses(String... classes)
void
addRegexps(String... regexps)
ClassLoader
getClassLoader()
boolean
isSafeClass(String className)
void
read(ClassAllowList allowList)
-
-
-
Constructor Detail
-
ClassAllowList
public ClassAllowList()
-
ClassAllowList
public ClassAllowList(Collection<String> classes, List<String> regexps, ClassLoader classLoader)
-
-
Method Detail
-
isSafeClass
public boolean isSafeClass(String className)
-
addClasses
public void addClasses(Class<?>... classes)
-
addClasses
public void addClasses(String... classes)
-
addRegexps
public void addRegexps(String... regexps)
-
read
public void read(ClassAllowList allowList)
-
getClassLoader
public ClassLoader getClassLoader()
-
-