@Deprecated public class WhitelistedSerializationStrategy extends DefaultSerializationStrategy
SerializationStrategy
which uses a whitelist of allowed classes for deserialization.
Constructor and Description |
---|
WhitelistedSerializationStrategy()
Deprecated.
Initializes
WhitelistedSerializationStrategy with the list of classes
which are allowed to deserialize by default. |
WhitelistedSerializationStrategy(List<String> allowedClasses)
Deprecated.
Initializes
WhitelistedSerializationStrategy with specified allowed classes. |
Modifier and Type | Method and Description |
---|---|
protected ObjectInputStream |
createObjectInputStream(byte[] byteArray)
Deprecated.
Creates an
ObjectInputStream for deserialization. |
deserialize, serialize
public WhitelistedSerializationStrategy()
WhitelistedSerializationStrategy
with the list of classes
which are allowed to deserialize by default.public WhitelistedSerializationStrategy(List<String> allowedClasses)
WhitelistedSerializationStrategy
with specified allowed classes.allowedClasses
- The allowed classes for deserialization.protected ObjectInputStream createObjectInputStream(byte[] byteArray) throws IOException
DefaultSerializationStrategy
ObjectInputStream
for deserialization.createObjectInputStream
in class DefaultSerializationStrategy
byteArray
- Data to be deserialized.ObjectInputStream
which should be used for deserialization.IOException
- If something went wrong.Copyright © 2019. All rights reserved.