[dubbo] branch 3.0 updated: `org.apache.dubbo.*` add serialization whitelist (#8423)

[albumenj]

This is an automated email from the ASF dual-hosted git repository.

albumenj pushed a commit to branch 3.0
in repository https://gitbox.apache.org/repos/asf/dubbo.git


The following commit(s) were added to refs/heads/3.0 by this push:
     new 100655a  `org.apache.dubbo.*` add serialization whitelist (#8423)
100655a is described below

commit 100655a888e7f30ed41f0d16a20dcc80103e7e0f
Author: haoyann <1064645...@qq.com>
AuthorDate: Thu Aug 5 19:04:18 2021 +0800

    `org.apache.dubbo.*` add serialization whitelist (#8423)
---
 .../serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java      | 1 +
 .../serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java    | 1 +
 2 files changed, 2 insertions(+)

diff --git 
a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
 
b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
index 98b37aa..d2573de 100644
--- 
a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
+++ 
b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
@@ -25,6 +25,7 @@ public class DefaultHessian2FactoryInitializer extends 
AbstractHessian2FactoryIn
     protected SerializerFactory createSerializerFactory() {
         Hessian2SerializerFactory hessian2SerializerFactory = new 
Hessian2SerializerFactory();
         
hessian2SerializerFactory.getClassFactory().allow(RuntimeException.class.getName());
+        
hessian2SerializerFactory.getClassFactory().allow("org.apache.dubbo.*");
         return hessian2SerializerFactory;
     }
 }
diff --git 
a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
 
b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
index 791ba14..9614319 100644
--- 
a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
+++ 
b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
@@ -49,6 +49,7 @@ public class WhitelistHessian2FactoryInitializer extends 
AbstractHessian2Factory
             }
         }
         
serializerFactory.getClassFactory().allow(RuntimeException.class.getName());
+        serializerFactory.getClassFactory().allow("org.apache.dubbo.*");
         return serializerFactory;
     }