[
https://issues.apache.org/jira/browse/QPIDJMS-495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17066686#comment-17066686
]
Timothy A. Bish commented on QPIDJMS-495:
-----------------------------------------
The policies are pluggable so if you want something that isn't in the default
or you want different configuration you can of course write you own. We have
chosen not to advertise the system properties in the documentation as it would
lead to more confusion and is not they way we recommend the feature to be used.
> whiteList/blackList properties have no effect
> ---------------------------------------------
>
> Key: QPIDJMS-495
> URL: https://issues.apache.org/jira/browse/QPIDJMS-495
> Project: Qpid JMS
> Issue Type: Bug
> Components: qpid-jms-client
> Affects Versions: 0.48.0
> Reporter: Miko Nieminen
> Priority: Major
>
> Documentation says:
> *jms.deserializationPolicy.whiteList* A comma separated list of class/package
> names that should be allowed when deserializing the contents of a JMS
> ObjectMessage, unless overridden by the blackList. The names in this list are
> not pattern values, the exact class or package name must be configured, e.g
> "java.util.Map" or "java.util". Package matches include sub-packages. Default
> is to allow all. *jms.deserializationPolicy.blackList* A comma separated list
> of class/package names that should be rejected when deserializing the
> contents of a JMS ObjectMessage. The names in this list are not pattern
> values, the exact class or package name must be configured, e.g
> "java.util.Map" or "java.util". Package matches include sub-packages. Default
> is to prevent none.
> But it seems these properties have no effect. Instead the properties that
> work are:
> {{org.apache.qpid.jms.deserialization.white_list}}
> {{org.apache.qpid.jms.deserialization.black_list}}
> These properties are defined in JmsDefaultDeserializationPolicy.java:
> https://github.com/apache/qpid-jms/blob/0.48.0/qpid-jms-client/src/main/java/org/apache/qpid/jms/policy/JmsDefaultDeserializationPolicy.java#L49
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
