public final class ClassWhiteList extends Object
ClassWhiteList
maintains classes definitions either by name or regular expression and is used for
permissioning.
By default it includes regular expressions from the system property "infinispan.deserialization.whitelist.regexps" and fully qualified class names from "infinispan.deserialization.whitelist.classes".
Classes are checked first against the set of class names, and in case not present each of the regular expressions are evaluated in the order supplied.
Constructor and Description |
---|
ClassWhiteList() |
ClassWhiteList(List<String> regexps) |
Modifier and Type | Method and Description |
---|---|
void |
addClasses(Class<?>... classes) |
void |
addRegexps(String... regexps) |
boolean |
isSafeClass(String className) |
Copyright © 2020 JBoss, a division of Red Hat. All rights reserved.