RFR: 8264859: Implement Context-Specific Deserialization Filters [v3]

[Chris Hegarty]

On Fri, 21 May 2021 03:02:43 GMT, Brent Christian <bchristi at openjdk.org> wrote:

>> Roger Riggs has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Simplify factory interface to BinaryOperator<ObjectInputFilter> and cleanup the example
>
> src/java.base/share/classes/java/io/ObjectInputStream.java line 193:
> 
>> 191:  * the state.
>> 192:  *
>> 193:  * The deserialization filter for a stream is determined in one of the following ways:
> 
> Should this line start with a `<p>` ?

At this point in the OIS spec it would be good to introduce the idea of a stream-specific filter. Maybe open this paragraph with some additional context, like say:


 * <p> An {@code ObjectInputStream} has an optional <i>stream-specific</i>
 * deserialization filter. The stream-specific deserialization filter
 * is determined in one of the following ways:


then enumerate the ways in which the stream-specific deserialization filter is determine, and drop how the filter factory can be set, etc. That is best left to the Config.

-------------

PR: https://git.openjdk.java.net/jdk/pull/3996