ObjectInputStream that loads from the
class loader for this web application. This allows classes defined only
with the web application to be found correctly.
| Modifier and Type | Field and Description |
|---|---|
| private final String | |
| private final Pattern | |
| private final ClassLoader | classLoader
The class loader we will use to resolve classes. |
| private final Log | |
| private static final WeakHashMap | |
| private final Set | |
| private static final StringManager | |
| private final boolean |
| Access | Constructor and Description |
|---|---|
| public | CustomObjectInputStream(InputStream
The input stream we will read from stream, ClassLoader The class loader used to instantiate objects classLoader)Construct a new instance of CustomObjectInputStream without any filtering of deserialized classes. |
| public | CustomObjectInputStream(InputStream
The input stream we will read from stream, ClassLoader The class loader used to instantiate objects classLoader, Log The logger to use to report any issues. It may only be null if
the filterMode does not require logging log, Pattern The regular expression to use to filter
deserialized classes. The fully qualified
class name must match this pattern for
deserialization to be allowed if filtering
is enabled. allowedClassNamePattern, boolean Should any failures be logged? warnOnFailure)Construct a new instance of CustomObjectInputStream with filtering of deserialized classes. |
| Modifier and Type | Method and Description |
|---|---|
| public Class | resolveClass(ObjectStreamClass
Class description from the input stream classDesc)Overrides java. Load the local class equivalent of the specified stream class description, by using the class loader assigned to this Context. |
| protected Class | resolveProxyClass(String[]
the list of interface names that were
deserialized in the proxy class descriptor interfaces)Overrides java. Return a proxy class that implements the interfaces named in a proxy class descriptor. |
| allowedClassNameFilter | back to summary |
|---|---|
| private final String allowedClassNameFilter | |
| allowedClassNamePattern | back to summary |
|---|---|
| private final Pattern allowedClassNamePattern | |
| classLoader | back to summary |
|---|---|
| private final ClassLoader classLoader The class loader we will use to resolve classes. | |
| log | back to summary |
|---|---|
| private final Log log | |
| reportedClassCache | back to summary |
|---|---|
| private static final WeakHashMap<ClassLoader, Set<String>> reportedClassCache | |
| reportedClasses | back to summary |
|---|---|
| private final Set<String> reportedClasses | |
| sm | back to summary |
|---|---|
| private static final StringManager sm | |
| warnOnFailure | back to summary |
|---|---|
| private final boolean warnOnFailure | |
| CustomObjectInputStream | back to summary |
|---|---|
| public CustomObjectInputStream(InputStream stream, ClassLoader classLoader) throws IOException Construct a new instance of CustomObjectInputStream without any filtering of deserialized classes.
| |
| CustomObjectInputStream | back to summary |
|---|---|
| public CustomObjectInputStream(InputStream stream, ClassLoader classLoader, Log log, Pattern allowedClassNamePattern, boolean warnOnFailure) throws IOException Construct a new instance of CustomObjectInputStream with filtering of deserialized classes.
| |
| resolveClass | back to summary |
|---|---|
| public Class Overrides java. Load the local class equivalent of the specified stream class description, by using the class loader assigned to this Context.
| |
| resolveProxyClass | back to summary |
|---|---|
| protected Class Overrides java. Return a proxy class that implements the interfaces named in a proxy class descriptor. Do this using the class loader assigned to this Context.
| |