Re: RFR: 8264859: Implement Context-Specific Deserialization Filters [v10]

2021-05-26 Thread Roger Riggs
On Wed, 26 May 2021 22:02:36 GMT, Brent Christian wrote: >> Roger Riggs has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Editorial updates to review comments. >> Simplify the builtin filter factory implementation. >> Add atomic

Re: RFR: 8264859: Implement Context-Specific Deserialization Filters [v10]

2021-05-26 Thread Brent Christian
On Wed, 26 May 2021 16:48:53 GMT, Roger Riggs wrote: >> JEP 415: Context-specific Deserialization Filters extends the >> deserialization filtering mechanisms with more flexible and customizable >> protections against malicious deserialization. See JEP 415: >>

Re: RFR: 8264859: Implement Context-Specific Deserialization Filters [v10]

2021-05-26 Thread Roger Riggs
> JEP 415: Context-specific Deserialization Filters extends the deserialization > filtering mechanisms with more flexible and customizable protections against > malicious deserialization. See JEP 415: https://openjdk.java.net/jeps/415. > The `java.io.ObjectInputFilter` and