Class ClassAllowList

java.lang.Object
org.infinispan.commons.configuration.ClassAllowList
Direct Known Subclasses:
ClassWhiteList

public class ClassAllowList extends Object
The ClassAllowList maintains classes definitions either by name or regular expression and is used for permissioning.

By default it includes regular expressions from the system property "infinispan.deserialization.allowlist.regexps" and fully qualified class names from "infinispan.deserialization.allowlist.classes".

Classes are checked first against the set of class names, and in case not present each of the regular expressions are evaluated in the order supplied.

Since:
9.4
  • Constructor Details Link icon

  • Method Details Link icon

    • isSafeClass Link icon

      public boolean isSafeClass(String className)
    • addClasses Link icon

      public void addClasses(Class<?>... classes)
    • addClasses Link icon

      public void addClasses(String... classes)
    • addRegexps Link icon

      public void addRegexps(String... regexps)
    • read Link icon

      public void read(ClassAllowList allowList)
    • getClassLoader Link icon

      public ClassLoader getClassLoader()