You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dubbo.apache.org by li...@apache.org on 2021/04/09 14:08:09 UTC
[dubbo-website] branch master updated: update security doc
This is an automated email from the ASF dual-hosted git repository.
liujun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-website.git
The following commit(s) were added to refs/heads/master by this push:
new a6d5664 update security doc
a6d5664 is described below
commit a6d5664805318aa65498c120894ed657aa0cfd91
Author: ken.lj <ke...@gmail.com>
AuthorDate: Fri Apr 9 22:07:48 2021 +0800
update security doc
---
content/en/docs/notices/security.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/content/en/docs/notices/security.md b/content/en/docs/notices/security.md
index e7428fe..bb6983c 100755
--- a/content/en/docs/notices/security.md
+++ b/content/en/docs/notices/security.md
@@ -46,7 +46,7 @@ The protocol and deserialization method can be changed without affecting the bus
Do not expose the open port of Dubbo server to the public network. But pay attention to the exceptional, if the attacker is in the Intranet environment, he can still attack.
-* Enable filtering of incoming serialization data for Java default serialization
+* Enable filtering of incoming serialization data for Java default serialization
Remember to configure filtering rules before enabling Java default serialization.
This feature is first supported in JDK 9 and has been back-ported to JDK 8, 7, and 6.
https://docs.oracle.com/javase/10/core/serialization-filtering1.htm#JSCOR-GUID-3ECB288D-E5BD-4412-892F-E9BB11D4C98A