[12] RFR 8193859: Allow user provided ObjectInputFilter in SealedObject and SignedObject
Weijun Wang
weijun.wang at oracle.com
Tue Aug 14 14:59:07 UTC 2018
> On Aug 14, 2018, at 10:18 PM, Roger Riggs <Roger.Riggs at Oracle.com> wrote:
>>
>> *
>> + * In this example, the {@link ObjectInputFilter} object is used during
>> + * deserialization to check the contents of the stream. If {@link #getObject()}
>> + * is called, the {@link ObjectInputFilter.Config#getSerialFilter()
>> + * initial process-wide filter} is used.
>>
>> I copied the words from ObjectInputStream::getObjectInputFilter. Is this a formal name of the "global filter"?
> I've had a request to update the terminology, so 'system filter' will be more appropriate.
s/initial process-wide filter/system filter/?
--Max
> [1] 8202675 <https://bugs.openjdk.java.net/browse/JDK-8202675> Replace process-wide terminology in serial filtering to be consistent
>
> Regards, Roger
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20180814/ff484b24/attachment.htm>
More information about the security-dev
mailing list