RFR: 8264859: Implement Context-Specific Deserialization Filters [v3]

[Roger Riggs]

On Thu, 20 May 2021 18:59:58 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Roger Riggs has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Simplify factory interface to BinaryOperator<ObjectInputFilter> and cleanup the example
>
> src/java.base/share/classes/java/io/ObjectInputFilter.java line 1079:
> 
>> 1077:                 }
>> 1078:                 // There are no classes to check and none of the limits have been exceeded.
>> 1079:                 return Status.ALLOWED;
> 
> Should this be addressed outside of this JEP and pushed separately?

Reverted, it might be a useful change but has compatibility concerns.

-------------

PR: https://git.openjdk.java.net/jdk/pull/3996