You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dubbo.apache.org by al...@apache.org on 2021/08/05 11:04:38 UTC

[dubbo] branch 3.0 updated: `org.apache.dubbo.*` add serialization whitelist (#8423)

This is an automated email from the ASF dual-hosted git repository.

albumenj pushed a commit to branch 3.0
in repository https://gitbox.apache.org/repos/asf/dubbo.git


The following commit(s) were added to refs/heads/3.0 by this push:
     new 100655a  `org.apache.dubbo.*` add serialization whitelist (#8423)
100655a is described below

commit 100655a888e7f30ed41f0d16a20dcc80103e7e0f
Author: haoyann <10...@qq.com>
AuthorDate: Thu Aug 5 19:04:18 2021 +0800

    `org.apache.dubbo.*` add serialization whitelist (#8423)
---
 .../serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java      | 1 +
 .../serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java    | 1 +
 2 files changed, 2 insertions(+)

diff --git a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
index 98b37aa..d2573de 100644
--- a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
+++ b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/DefaultHessian2FactoryInitializer.java
@@ -25,6 +25,7 @@ public class DefaultHessian2FactoryInitializer extends AbstractHessian2FactoryIn
     protected SerializerFactory createSerializerFactory() {
         Hessian2SerializerFactory hessian2SerializerFactory = new Hessian2SerializerFactory();
         hessian2SerializerFactory.getClassFactory().allow(RuntimeException.class.getName());
+        hessian2SerializerFactory.getClassFactory().allow("org.apache.dubbo.*");
         return hessian2SerializerFactory;
     }
 }
diff --git a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
index 791ba14..9614319 100644
--- a/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
+++ b/dubbo-serialization/dubbo-serialization-hessian2/src/main/java/org/apache/dubbo/common/serialize/hessian2/dubbo/WhitelistHessian2FactoryInitializer.java
@@ -49,6 +49,7 @@ public class WhitelistHessian2FactoryInitializer extends AbstractHessian2Factory
             }
         }
         serializerFactory.getClassFactory().allow(RuntimeException.class.getName());
+        serializerFactory.getClassFactory().allow("org.apache.dubbo.*");
         return serializerFactory;
     }