RFR: 8283093: JMX connections should default to using an ObjectInputFilter [v3]

[Kevin Walls]

On Tue, 25 Oct 2022 18:31:29 GMT, Serguei Spitsyn <sspitsyn at openjdk.org> wrote:

> How was this set of segments to be filtered by default identified?
I started with the set of classes given as an example in the Core Libraries guide, https://docs.oracle.com/en/java/javase/19/core/serialization-filtering1.html in the "Filters for JMX" section.  
I queried the fields of every MBean in the JDK, plus running the tests in the JDK, and added the Subject class, as that caused a the only filter rejection I saw.

-------------

PR: https://git.openjdk.org/jdk/pull/10507