[
https://issues.apache.org/jira/browse/AMQ-8510?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17734210#comment-17734210
]
Matt Pavlovich commented on AMQ-8510:
-------------------------------------
Hi [~jbonofre] I want to keep this one in a 5.19.x bucket. This is a user
experience improvement. Currently, if a user has a java package to 'add' they
have to have knowledge of all the internals to also include the ones needed by
ActiveMQ by default. Some of the defaults need to be re-homed to be maintained
going forward (hawtbuf, etc) and xstream might should be dropped by default for
security.
Currently for a user to add 'com.mycompany.dto'
{noformat}
<bean id="connectionFactory" ..
<property name="trustedPackages"
value="java.lang,org.apache.activemq,org.fusesource.hawtbuf,com.thoughtworks.xstream.mapper,com.mycompany.dto"
/>
..
{noformat}
Planned improvement:
{noformat}
<bean id="connectionFactory" ..
<property name="addTrustedPackages" value="com.mycompany.dto" />
..
{noformat}
> Add the ability to 'add' and 'remove' a single trusted package
> --------------------------------------------------------------
>
> Key: AMQ-8510
> URL: https://issues.apache.org/jira/browse/AMQ-8510
> Project: ActiveMQ
> Issue Type: Improvement
> Reporter: Matt Pavlovich
> Assignee: Matt Pavlovich
> Priority: Minor
>
> Currently, trusted packages have a set of defaults that handle a lot of the
> default scenarios needed by activemq (including virtual destination selector
> cache).
> For apps and unit tests, it would be helpful to 'add' and 'remove' single or
> collections of packages to the default set that vs having to construct new
> lists and add the new values.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
