chaokunyang commented on code in PR #3061:
URL: https://github.com/apache/fory/pull/3061#discussion_r2629717741
##########
java/fory-core/src/main/java/org/apache/fory/config/ForyBuilder.java:
##########
@@ -307,6 +308,22 @@ public ForyBuilder requireClassRegistration(boolean
requireClassRegistration) {
return this;
}
+ /**
+ * Indicates whether a TypeChecker will be configured after Fory creation.
Setting this to true
+ * suppresses the security warning when {@link
#requireClassRegistration(boolean)} is disabled.
+ *
+ * <p>You MUST configure {@link org.apache.fory.resolver.TypeChecker} or
{@link
+ * org.apache.fory.resolver.ClassChecker} after building Fory, otherwise
deserialization will be
+ * insecure.
+ *
+ * @param willConfigureTypeChecker true if a TypeChecker/ClassChecker will
be configured later
+ * @return this builder instance for method chaining
+ */
+ public ForyBuilder willConfigureTypeChecker(boolean
willConfigureTypeChecker) {
Review Comment:
I prefer not adding this API
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
