RFR 9: JEP 290: Filter Incoming Serialization Data

[Bernd Eckenfels]

Hello,

I have my own stream which does that (however mostly on the classes,
not array size) and I used a Predicate functional interface for the
filtering.

I also have a prefix checking white and blacklist implementation for
it. (using a sorted array and binary search).

I try to et the code online later.

Gruss
Bernd


Am Wed, 20 Jul
2016 09:30:06 -0400 schrieb Roger Riggs <Roger.Riggs at Oracle.com>:

> Hi Max,
> 
> The use of filtering needs to be very intentional and so an 
> implementation should be required.
> I don't expect there to be additional methods and if so a default for 
> checkInput could be added at that time.
> 
> Roger
> 
> 
> On 7/19/2016 11:18 PM, Wang Weijun wrote:
> > The ObjectInputFilter interface has only one method. Are we
> > expecting more methods to be added later and maybe some people will
> > only be interested in a new method? If yes, I suggest we provide a
> > default implementation of the current method to return ALLOWED.
> >
> > --Max
> >
> >> On Jul 19, 2016, at 10:02 PM, Roger Riggs <Roger.Riggs at oracle.com>
> >> wrote:
> >>
> >> Please review the design, implementation, and tests of JEP 290:
> >> Filter Incoming Serialization Data[1]
>