spring-amqp icon indicating copy to clipboard operation
spring-amqp copied to clipboard

Published 20 hours ago • verified publisher icon spring-projects

Use JDK `ObjectInputFilter` instead of calling `AllowedListDeserializingMessageConverter::checkAllowedList` in `ConfigurableObjectInputStream::resolveClass`

Open quaff opened this issue 10 months ago • 2 comments

I think it's better to use standard API. see Java Serialization Filters

https://github.com/spring-projects/spring-amqp/blob/603e6c8c09838aff5a8dcf3f9e6e1ab1d3488cde/spring-amqp/src/main/java/org/springframework/amqp/support/converter/SimpleMessageConverter.java#L158-L162

https://github.com/spring-projects/spring-amqp/blob/603e6c8c09838aff5a8dcf3f9e6e1ab1d3488cde/spring-amqp/src/main/java/org/springframework/amqp/support/converter/SerializerMessageConverter.java#L167-L172

quaff avatar Apr 18 '24 14:04 quaff