The default value of that property (if it's not set) is
"java.lang,javax.security,java.util,org.apache.activemq,org.fusesource.hawtbuf,com.thoughtworks.xstream.mapper"
(see ClassLoadingAwareObjectInputStream.java), and the
org.fusesource.hawtbuf class in question looks like a UTF8Buffer since
that's referenced in the switch statements in ActiveMQMapMessage.java.

I don't see any immediate reason why that property would come into play for
MapMessages, but I don't know this code well. Maybe you could set
breakpoints on ClassLoadingAwareObjectInputStream's constructor and on its
checkSecurity() method to see when/why they get called?

Tim

On Fri, Oct 13, 2017 at 9:23 AM, khandelwalanuj <
anuj.cool.khandel...@gmail.com> wrote:

> Can someone check this please.
>
> I just wanted to know which library from "org." is being used here for MAP
> messages as mentioned above.
>
>
>
> --
> Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-
> f2341805.html
>

Reply via email to