Package org.apache.activemq.artemis.utils

Class ObjectInputStreamWithClassLoader

java.lang.Object

java.io.InputStream

java.io.ObjectInputStream

org.apache.activemq.artemis.utils.ObjectInputStreamWithClassLoader

All Implemented Interfaces:

Closeable, DataInput, ObjectInput, ObjectStreamConstants, AutoCloseable

public class ObjectInputStreamWithClassLoader
extends ObjectInputStream

Nested Class Summary

Nested classes/interfaces inherited from class java.io.ObjectInputStream

ObjectInputStream.GetField

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALLOWLIST_PROPERTY
static final String	BLACKLIST_PROPERTY	Deprecated, for removal: This API element is subject to removal in a future version.
static final String	CATCH_ALL_WILDCARD	Value used to indicate that all classes should be allowed or denied
static final String	DENYLIST_PROPERTY
static final String	WHITELIST_PROPERTY	Deprecated, for removal: This API element is subject to removal in a future version.

Fields inherited from interface java.io.ObjectStreamConstants

baseWireHandle, PROTOCOL_VERSION_1, PROTOCOL_VERSION_2, SC_BLOCK_DATA, SC_ENUM, SC_EXTERNALIZABLE, SC_SERIALIZABLE, SC_WRITE_METHOD, SERIAL_FILTER_PERMISSION, STREAM_MAGIC, STREAM_VERSION, SUBCLASS_IMPLEMENTATION_PERMISSION, SUBSTITUTION_PERMISSION, TC_ARRAY, TC_BASE, TC_BLOCKDATA, TC_BLOCKDATALONG, TC_CLASS, TC_CLASSDESC, TC_ENDBLOCKDATA, TC_ENUM, TC_EXCEPTION, TC_LONGSTRING, TC_MAX, TC_NULL, TC_OBJECT, TC_PROXYCLASSDESC, TC_REFERENCE, TC_RESET, TC_STRING

Constructor Summary

Constructors

Constructor	Description
ObjectInputStreamWithClassLoader(InputStream in)

Method Summary

Modifier and Type	Method	Description
void	addToAllowList(String allowList)	Adds to the currently configured allowList with a comma separated string containing the additional allowList entries.
void	addToDenyList(String denyList)	Adds to the currently configured denyList with a comma separated string containing the additional denyList entries.
String	getAllowList()
String	getDenyList()
protected Class	resolveClass(ObjectStreamClass desc)
protected Class	resolveProxyClass(String[] interfaces)
void	setAllowList(String allowList)	Replaces the currently configured allowList with a comma separated string containing the new allowList.
void	setDenyList(String denyList)	Replaces the currently configured denyList with a comma separated string containing the new denyList.

Methods inherited from class java.io.ObjectInputStream

available, close, defaultReadObject, enableResolveObject, getObjectInputFilter, read, read, readBoolean, readByte, readChar, readClassDescriptor, readDouble, readFields, readFloat, readFully, readFully, readInt, readLine, readLong, readObject, readObjectOverride, readShort, readStreamHeader, readUnshared, readUnsignedByte, readUnsignedShort, readUTF, registerValidation, resolveObject, setObjectInputFilter, skipBytes

Methods inherited from class java.io.InputStream

mark, markSupported, nullInputStream, read, readAllBytes, readNBytes, readNBytes, reset, skip, skipNBytes, transferTo

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.io.ObjectInput

read, skip

Field Details

CATCH_ALL_WILDCARD

public static final String CATCH_ALL_WILDCARD

Value used to indicate that all classes should be allowed or denied

See Also:

• Constant Field Values

WHITELIST_PROPERTY

@Deprecated(forRemoval=true)
public static final String WHITELIST_PROPERTY

Deprecated, for removal: This API element is subject to removal in a future version.

See Also:

• Constant Field Values

ALLOWLIST_PROPERTY

public static final String ALLOWLIST_PROPERTY

See Also:

• Constant Field Values

BLACKLIST_PROPERTY

@Deprecated(forRemoval=true)
public static final String BLACKLIST_PROPERTY

Deprecated, for removal: This API element is subject to removal in a future version.

See Also:

• Constant Field Values

DENYLIST_PROPERTY

public static final String DENYLIST_PROPERTY

See Also:

• Constant Field Values

Constructor Details

ObjectInputStreamWithClassLoader

public ObjectInputStreamWithClassLoader(InputStream in)
                                 throws IOException

Throws:

IOException

Method Details

getAllowList

public String getAllowList()

Returns:

the allowList configured on this policy instance

getDenyList

public String getDenyList()

Returns:

the denyList configured on this policy instance

setAllowList

public void setAllowList(String allowList)

Replaces the currently configured allowList with a comma separated string containing the new allowList. Null or empty string denotes no allowList entries, "*" indicates that all classes are allowListed.

Parameters:

allowList - the list that this policy is configured to recognize.

addToAllowList

public void addToAllowList(String allowList)

Adds to the currently configured allowList with a comma separated string containing the additional allowList entries. Null or empty string denotes no additional allowList entries.

Parameters:

allowList - the additional list entries that this policy is configured to recognize.

setDenyList

public void setDenyList(String denyList)

Replaces the currently configured denyList with a comma separated string containing the new denyList. Null or empty string denotes no denylist entries, "*" indicates that all classes are denylisted.

Parameters:

denyList - the list that this policy is configured to recognize.

addToDenyList

public void addToDenyList(String denyList)

Adds to the currently configured denyList with a comma separated string containing the additional denyList entries. Null or empty string denotes no additional denyList entries.

Parameters:

denyList - the additional list entries that this policy is configured to recognize.

resolveClass

protected Class resolveClass(ObjectStreamClass desc)
                      throws IOException,
ClassNotFoundException

Overrides:

resolveClass in class ObjectInputStream

Throws:

IOException

ClassNotFoundException

resolveProxyClass

protected Class resolveProxyClass(String[] interfaces)
                           throws IOException,
ClassNotFoundException

Overrides:

resolveProxyClass in class ObjectInputStream

Throws:

IOException

ClassNotFoundException