[
https://issues.apache.org/jira/browse/IGNITE-8093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16469769#comment-16469769
]
Prachi Garg commented on IGNITE-8093:
-------------------------------------
[~dmagda], Please review -
https://apacheignite.readme.io/v2.4/docs/securing-data-deserialization
> Document IGNITE_MARSHALLER_WHITELIST and IGNITE_MARSHALLER_BLACKLIST
> properties
> -------------------------------------------------------------------------------
>
> Key: IGNITE-8093
> URL: https://issues.apache.org/jira/browse/IGNITE-8093
> Project: Ignite
> Issue Type: New Feature
> Components: documentation
> Reporter: Denis Magda
> Assignee: Prachi Garg
> Priority: Critical
> Fix For: 2.5
>
>
> Document how to use and configure two system properties that help to prevent
> the execution of arbitrary 3rd party code - IGNITE_MARSHALLER_WHITELIST and
> IGNITE_MARSHALLER_BLACKLIST.
> Use JavaDocs for more details and this disclosure message:
> https://lists.apache.org/thread.html/45e7d5e2c6face85aab693f5ae0616563132ff757e5a558da80d0209@%3Cdev.ignite.apache.org%3E
> The documentation needs to be under "Security" section and has a reference
> from a production readiness.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
