RFR: 8283093: JMX connections should default to using an ObjectInputFilter [v3]

[Kevin Walls]

On Tue, 11 Oct 2022 17:48:30 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Kevin Walls has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Additional test with command-line filter setting.
>
> src/jdk.management.agent/share/conf/management.properties line 306:
> 
>> 304: #   Otherwise, the status is UNDECIDED.
>> 305: com.sun.management.jmxremote.serial.filter.pattern=java.lang.*;java.math.BigInteger;java.math.BigDecimal;java.util.*;javax.management.openmbean.*;javax.management.ObjectName;java.rmi.MarshalledObject;javax.security.auth.Subject;!*
>> 306: 
> 
> Should the pattern also include the name of the module that define these type?

Thinking that won't matter for packages like java.lang but we could mention somewhere (e.g. release note) that a package can be specified (it's documented in the ObjectInputFilter api docs I think).

-------------

PR: https://git.openjdk.org/jdk/pull/10507