Re: RFR 9: 8155760 Implement Serialization Filtering

[Roger Riggs]

Hi Chris,

Thanks for taking another look.
On 10/3/2016 4:53 AM, Chris Hegarty wrote:
Roger,

On 14/09/16 10:46, Chris Hegarty wrote:

One more additional comment:

 4) Since filtering is not controlled by the Security Manager,
    does it make sense for its configuration to live in the
    java.security file?
The primary function of serialization filtering is security related and 
it leverages the existing
configuration mechanism for security functions. Though slightly 
off-topic, it did not seem
worthwhile to create a separate configuration mechanism. I discussed the 
location and properties
with the security team and they have reviewed the changes.

Thanks, Roger


-Chris.

-Chris.



/Webrev: 
http://cr.openjdk.java.net/~rriggs/webrev-serial-filter-jdk9-8155760/ 
<http://cr.openjdk.java.net/%7Erriggs/webrev-serial-filter-jdk9-8155760/>/

SpecDiff:
http://cr.openjdk.java.net/~rriggs/filter-diffs/overview-summary.html

Javadoc (subset)
http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputStream.html 



http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/ObjectInputFilter.html 



http://cr.openjdk.java.net/~rriggs/filter-javadoc/java/io/SerializablePermission.html 




Thanks, Roger