cshannon opened a new pull request, #2026:
URL: https://github.com/apache/activemq/pull/2026

   Many classes in the java.lang package should not ever need to be serialized 
so this commit removes the default package and instead includes an allow list 
of classes that are ok to serialize that are part of the package. Users have 
the option to restore the previous behavior by appending "java.lang" back to 
the serialized packages property if desired.
   
   The main goal of this is to restrict the allowed list to help prevent any 
future issues that could be uncovered by allowing unnecessary types to be 
serialized.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact


Reply via email to