rzo1 opened a new pull request, #1186:
URL: https://github.com/apache/opennlp/pull/1186

   Backport of #1185 to the `opennlp-2.x` branch.
   
   Adds a filtered `BaseModel.deserialize(Class, InputStream)` helper that 
installs an `ObjectInputFilter` allowlist on the stream before the first object 
is read - the only point at which the top-level object can be protected, since 
a filter cannot be installed from within `readObject`.
   
   Changes relative to #1185:
   - Paths adapted to the 2.x module layout (`opennlp-tools` instead of 
`opennlp-core/opennlp-runtime`).
   - Javadoc reference to `SvmDoccatModel` removed, as that class does not 
exist on 2.x.
   
   Verified with `mvn -pl opennlp-tools clean test -Dtest=BaseModelTest` (2/2 
pass, checkstyle/forbiddenapis clean).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to