RFR: 8264859: Implement Context-Specific Deserialization Filters [v9]

[Roger Riggs]

On Tue, 25 May 2021 23:25:41 GMT, Brent Christian <bchristi at openjdk.org> wrote:

>> Roger Riggs has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Editorial updates
>>   Updated java.security properties to include jdk.serialFilterFactory
>>   Added test cases to SerialFilterFactoryTest for java.security properties and
>>   enabling of the SecurityManager with existing policy permission files
>>   Corrected a test that OIS.setObjectInputFilter could not be called twice.
>>   Removed a Factory test that was not intended to be committed
>
> src/java.base/share/classes/java/io/ObjectInputFilter.java line 551:
> 
>> 549:     final class Config {
>> 550:         /**
>> 551:          * Lock object for filter and filter factory.
> 
> The lock is not used for the filter factory, is it?

The lock was needed for the factory to make the check and setting atomic.

-------------

PR: https://git.openjdk.java.net/jdk/pull/3996