pjfanning commented on PR #6649:
URL: https://github.com/apache/fineract/pull/6649#issuecomment-6262667705

   @galovics Good catch — agreed it should pin behaviour. Two wrinkles: 
`BasicPolymorphicTypeValidator` returns `INDETERMINATE` (not `DENIED`) for 
unmatched names and Jackson rejects after resolving the class, and a 
non-existent class like `com.example.Unlisted` fails with "no such class found" 
with or without the fix. So I've replaced the wiring test with one that 
deserializes a real `COBParameter` subclass outside the allow-listed packages 
and asserts the PTV "denied resolution" error — that one fails without the 
change (b845be332e).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to