public class HardenedObjectInputStream extends ObjectInputStream
It is assumed that classes in the "java.lang" and "java.util" packages are always authorized.
ObjectInputStream.GetField
baseWireHandle, PROTOCOL_VERSION_1, PROTOCOL_VERSION_2, SC_BLOCK_DATA, SC_ENUM, SC_EXTERNALIZABLE, SC_SERIALIZABLE, SC_WRITE_METHOD, STREAM_MAGIC, STREAM_VERSION, SUBCLASS_IMPLEMENTATION_PERMISSION, SUBSTITUTION_PERMISSION, TC_ARRAY, TC_BASE, TC_BLOCKDATA, TC_BLOCKDATALONG, TC_CLASS, TC_CLASSDESC, TC_ENDBLOCKDATA, TC_ENUM, TC_EXCEPTION, TC_LONGSTRING, TC_MAX, TC_NULL, TC_OBJECT, TC_PROXYCLASSDESC, TC_REFERENCE, TC_RESET, TC_STRING
Constructor and Description |
---|
HardenedObjectInputStream(InputStream in,
List<String> whitelist) |
HardenedObjectInputStream(InputStream in,
String[] whilelist) |
available, close, defaultReadObject, read, read, readBoolean, readByte, readChar, readDouble, readFields, readFloat, readFully, readFully, readInt, readLine, readLong, readObject, readShort, readUnshared, readUnsignedByte, readUnsignedShort, readUTF, registerValidation, skipBytes
mark, markSupported, read, reset, skip
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
read, skip
public HardenedObjectInputStream(InputStream in, String[] whilelist) throws IOException
IOException
public HardenedObjectInputStream(InputStream in, List<String> whitelist) throws IOException
IOException
Copyright © 2010 - 2020 Adobe. All Rights Reserved