Package org.infinispan.commons.configuration

Class ClassAllowList

java.lang.Object

org.infinispan.commons.configuration.ClassAllowList

Direct Known Subclasses:

ClassWhiteList

public class ClassAllowList
extends Object

The ClassAllowList maintains classes definitions either by name or regular expression and is used for permissioning.

By default it includes regular expressions from the system property "infinispan.deserialization.allowlist.regexps" and fully qualified class names from "infinispan.deserialization.allowlist.classes".

Classes are checked first against the set of class names, and in case not present each of the regular expressions are evaluated in the order supplied.

Since:

9.4

Constructor Summary

Constructors

Constructor	Description
ClassAllowList()
ClassAllowList(Collection<String> classes, List<String> regexps, ClassLoader classLoader)
ClassAllowList(List<String> regexps)

Method Summary

Modifier and Type	Method	Description
void	addClasses(Class<?>... classes)
void	addClasses(String... classes)
void	addRegexps(String... regexps)
ClassLoader	getClassLoader()
boolean	isSafeClass(String className)
void	read(ClassAllowList allowList)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ClassAllowList

public ClassAllowList()

ClassAllowList

public ClassAllowList(List<String> regexps)

ClassAllowList

public ClassAllowList(Collection<String> classes,
                      List<String> regexps,
                      ClassLoader classLoader)

Method Detail

isSafeClass

public boolean isSafeClass(String className)

addClasses

public void addClasses(Class<?>... classes)

addClasses

public void addClasses(String... classes)

addRegexps

public void addRegexps(String... regexps)

read

public void read(ClassAllowList allowList)

getClassLoader

public ClassLoader getClassLoader()