This is an automated email from the ASF dual-hosted git repository.

albumenj pushed a change to branch 3.2
in repository https://gitbox.apache.org/repos/asf/dubbo.git


    from c06c11c754 update IPv6 annotation and filter invalid IPv6 (#11266)
     add 3d64f1192d Update protobuf-java version in both dependency and plugin 
(#11261)
     add 213363422e Add mapping retry (#11265)
     add 671c7ff950 Enhance nacos regsitry (#11262)
     add 84c1c35aae Add  serialization check (#11217)
     add fc00efd704 Fix test cases for service name mapping (#11280)
     add 67993e168e Switch default check level (#11279)
     new a278feb372 Merge branch 'apache-3.1' into apache-3.2
     new 44fc2a6c2e Fix conflict
     new 7237e8baae Fix conflict for Nacos

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../dubbo/common/CommonScopeModelInitializer.java  |   2 +
 .../dubbo/common/constants/CommonConstants.java    |   2 +
 .../common/constants/LoggerCodeConstants.java      |   2 +
 .../common/utils/AllowClassNotifyListener.java}    |  10 +-
 .../common/utils/ClassLoaderResourceLoader.java    |   4 +-
 .../dubbo/common/utils/SerializeCheckStatus.java}  |  11 +-
 .../dubbo/common/utils/SerializeClassChecker.java  |  30 ++-
 .../common/utils/SerializeSecurityManager.java     | 224 ++++++++++++++++
 .../org/apache/dubbo/config/ApplicationConfig.java |  48 ++--
 .../main/resources/security/serialize.allowlist    | 125 +++++++++
 .../main/resources/security/serialize.blockedlist  |  74 ++++--
 .../src/test/java/com/pojo/Demo1.java              |  13 +-
 .../src/test/java/com/pojo/Demo2.java              |   4 +-
 .../src/test/java/com/pojo/Demo3.java              |   4 +-
 .../src/test/java/com/pojo/Demo4.java              |   4 +-
 .../src/test/java/com/pojo/Demo5.java              |   4 +-
 .../src/test/java/com/pojo/Demo6.java              |   4 +-
 .../src/test/java/com/pojo/Demo7.java              |   4 +-
 .../src/test/java/com/pojo/Demo8.java              |   4 +-
 .../src/test/java/com/pojo/DemoException1.java     |   4 +-
 .../src/test/java/com/pojo/DemoException2.java     |   4 +-
 .../src/test/java/com/pojo/DemoException3.java     |   5 +-
 .../src/test/java/com/pojo/Simple.java             |   4 +-
 .../src/test/java/com/service/DemoService1.java    |  41 +--
 .../src/test/java/com/service/DemoService2.java    |   5 +-
 .../common/utils/SerializeSecurityManagerTest.java | 128 +++++++++
 .../utils/TestAllowClassNotifyListener.java}       |  22 +-
 .../test/resources/security/serialize.allowlist    |   6 +-
 .../org/apache/dubbo/config/ServiceConfig.java     |  64 +++--
 .../apache/dubbo/config/ReferenceConfigTest.java   |   3 +-
 .../org/apache/dubbo/config/ServiceConfigTest.java |  95 ++++++-
 .../test/resources/security/serialize.allowlist    |   5 +-
 .../src/main/resources/META-INF/dubbo.xsd          |   5 +
 dubbo-demo/dubbo-demo-triple/pom.xml               |   4 +-
 dubbo-dependencies-bom/pom.xml                     |   3 +-
 dubbo-distribution/dubbo-all/pom.xml               |   6 -
 dubbo-distribution/dubbo-core-spi/pom.xml          |   6 -
 .../META-INF/native-image/reflect-config.json      |  13 -
 .../META-INF/native-image/resource-config.json     |   3 -
 .../registry/nacos/NacosNamingServiceWrapper.java  | 129 +++++++--
 .../registry/nacos/function/NacosConsumer.java     |  22 +-
 .../registry/nacos/function/NacosFunction.java     |  23 +-
 .../nacos/util/NacosNamingServiceUtils.java        |   8 +-
 .../dubbo/registry/nacos/MockNamingService.java    | 289 +++++++++++++++++++++
 .../nacos/NacosNamingServiceWrapperTest.java       | 122 +++++++--
 .../dubbo/registry/nacos/NacosRegistryTest.java    |  30 +--
 ...erWrapper.java => ProtocolSecurityWrapper.java} |  63 +++--
 .../dubbo/internal/org.apache.dubbo.rpc.Protocol   |   1 +
 dubbo-rpc/dubbo-rpc-triple/pom.xml                 |   4 +-
 .../serialize/fastjson2/FastJson2ObjectInput.java  |  12 +-
 .../serialize/fastjson2/FastJson2ObjectOutput.java |   1 +
 .../fastjson2/FastJson2Serialization.java          |   5 +-
 .../fastjson2/Fastjson2ScopeModelInitializer.java  |   2 +
 .../fastjson2/Fastjson2SecurityManager.java        | 128 +++++++++
 .../hessian2/Hessian2AllowClassManager.java        | 120 +++++++++
 .../hessian2/Hessian2ClassLoaderListener.java      |  26 +-
 .../serialize/hessian2/Hessian2FactoryManager.java | 110 ++++++++
 .../serialize/hessian2/Hessian2ObjectInput.java    |  21 +-
 .../serialize/hessian2/Hessian2ObjectOutput.java   |  11 +-
 .../hessian2/Hessian2ScopeModelInitializer.java    |   7 +-
 .../serialize/hessian2/Hessian2Serialization.java  |  11 +-
 .../hessian2/Hessian2SerializerFactory.java        |   9 +-
 .../dubbo/AbstractHessian2FactoryInitializer.java  |  56 ----
 .../dubbo/DefaultHessian2FactoryInitializer.java   |  31 ---
 .../hessian2/dubbo/Hessian2FactoryInitializer.java |  45 ----
 .../dubbo/WhitelistHessian2FactoryInitializer.java |  52 ----
 ...alize.hessian2.dubbo.Hessian2FactoryInitializer |   2 -
 ...rg.apache.dubbo.rpc.model.ScopeModelInitializer |   1 +
 dubbo-xds/pom.xml                                  |  16 +-
 pom.xml                                            |   1 +
 70 files changed, 1842 insertions(+), 515 deletions(-)
 copy dubbo-common/src/{test/java/org/apache/dubbo/common/utils/MyEnum.java => 
main/java/org/apache/dubbo/common/utils/AllowClassNotifyListener.java} (80%)
 copy dubbo-common/src/{test/java/org/apache/dubbo/common/utils/MyEnum.java => 
main/java/org/apache/dubbo/common/utils/SerializeCheckStatus.java} (92%)
 create mode 100644 
dubbo-common/src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java
 create mode 100644 dubbo-common/src/main/resources/security/serialize.allowlist
 copy 
dubbo-rpc/dubbo-rpc-api/src/test/java/org/apache/dubbo/rpc/support/LocalException.java
 => dubbo-common/src/test/java/com/pojo/Demo1.java (80%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo2.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo3.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo4.java (93%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo5.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo6.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo7.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Demo8.java (95%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/DemoException1.java (92%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/DemoException2.java (92%)
 copy 
dubbo-rpc/dubbo-rpc-grpc/src/main/java/org/apache/dubbo/rpc/protocol/grpc/GrpcConfig.java
 => dubbo-common/src/test/java/com/pojo/DemoException3.java (91%)
 copy dubbo-rpc/dubbo-rpc-injvm/src/test/java/demo/Empty.java => 
dubbo-common/src/test/java/com/pojo/Simple.java (95%)
 copy 
dubbo-filter/dubbo-filter-validation/src/test/java/org/apache/dubbo/validation/support/jvalidation/mock/JValidatorTestTarget.java
 => dubbo-common/src/test/java/com/service/DemoService1.java (54%)
 copy 
dubbo-rpc/dubbo-rpc-grpc/src/main/java/org/apache/dubbo/rpc/protocol/grpc/GrpcConfig.java
 => dubbo-common/src/test/java/com/service/DemoService2.java (91%)
 create mode 100644 
dubbo-common/src/test/java/org/apache/dubbo/common/utils/SerializeSecurityManagerTest.java
 copy 
dubbo-common/src/{main/java/org/apache/dubbo/common/utils/CharSequenceComparator.java
 => test/java/org/apache/dubbo/common/utils/TestAllowClassNotifyListener.java} 
(65%)
 copy 
dubbo-demo/dubbo-demo-xml/dubbo-demo-xml-consumer/src/main/resources/dubbo-migration.yaml
 => dubbo-common/src/test/resources/security/serialize.allowlist (93%)
 copy 
dubbo-demo/dubbo-demo-xml/dubbo-demo-xml-consumer/src/main/resources/dubbo-migration.yaml
 => 
dubbo-config/dubbo-config-api/src/test/resources/security/serialize.allowlist 
(93%)
 copy 
dubbo-test/dubbo-test-common/src/main/java/org/apache/dubbo/test/common/ErrorHandler.java
 => 
dubbo-registry/dubbo-registry-nacos/src/main/java/org/apache/dubbo/registry/nacos/function/NacosConsumer.java
 (64%)
 copy 
dubbo-test/dubbo-test-common/src/main/java/org/apache/dubbo/test/common/ErrorHandler.java
 => 
dubbo-registry/dubbo-registry-nacos/src/main/java/org/apache/dubbo/registry/nacos/function/NacosFunction.java
 (63%)
 create mode 100644 
dubbo-registry/dubbo-registry-nacos/src/test/java/org/apache/dubbo/registry/nacos/MockNamingService.java
 copy 
dubbo-rpc/dubbo-rpc-api/src/main/java/org/apache/dubbo/rpc/protocol/{ProtocolListenerWrapper.java
 => ProtocolSecurityWrapper.java} (52%)
 create mode 100644 
dubbo-serialization/dubbo-serialization-fastjson2/src/main/java/org/apache/dubbo/common/serialize/fastjson2/Fastjson2SecurityManager.java
 create mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2AllowClassManager.java
 copy 
dubbo-config/dubbo-config-spring/src/main/java/org/apache/dubbo/config/spring/SpringScopeModelInitializer.java
 => 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2ClassLoaderListener.java
 (60%)
 create mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2FactoryManager.java
 copy 
dubbo-plugin/dubbo-qos/src/main/java/org/apache/dubbo/qos/QosScopeModelInitializer.java
 => 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/Hessian2ScopeModelInitializer.java
 (88%)
 delete mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/AbstractHessian2FactoryInitializer.java
 delete mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
 delete mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/Hessian2FactoryInitializer.java
 delete mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
 delete mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/resources/META-INF/dubbo/internal/org.apache.dubbo.common.serialize.hessian2.dubbo.Hessian2FactoryInitializer
 create mode 100644 
dubbo-serialization/dubbo-serialization-hessian2/src/main/resources/META-INF/dubbo/internal/org.apache.dubbo.rpc.model.ScopeModelInitializer

Reply via email to