RFR: 8264859: Implement Context-Specific Deserialization Filters [v3]

[Roger Riggs]

On Fri, 21 May 2021 16:05:59 GMT, Chris Hegarty <chegar at openjdk.org> wrote:

>> Roger Riggs has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Simplify factory interface to BinaryOperator<ObjectInputFilter> and cleanup the example
>
> src/java.base/share/classes/java/io/ObjectInputFilter.java line 75:
> 
>> 73:  * protect individual contexts by providing a custom filter for each. When the stream
>> 74:  * is constructed, the filter factory can identify the execution context based upon
>> 75:  * the current thread-local state, hierarchy of callers, library, module, and class loader.
> 
> This list looks like it is enumerating what the filter factory does, but it is just an example of what could be done. Maybe that needs to be made more explicit. ".. the filter factory can identify execution context based upon, say, ... whatever it likes .. system nanoTime, ... " Or just add "e.g."

More verbiage  from the JEP.  Adding 'for example' or 'including' reinforces the 'can'.

-------------

PR: https://git.openjdk.java.net/jdk/pull/3996