The default value of that property (if it's not set) is "java.lang,javax.security,java.util,org.apache.activemq,org.fusesource.hawtbuf,com.thoughtworks.xstream.mapper" (see ClassLoadingAwareObjectInputStream.java), and the org.fusesource.hawtbuf class in question looks like a UTF8Buffer since that's referenced in the switch statements in ActiveMQMapMessage.java.
I don't see any immediate reason why that property would come into play for MapMessages, but I don't know this code well. Maybe you could set breakpoints on ClassLoadingAwareObjectInputStream's constructor and on its checkSecurity() method to see when/why they get called? Tim On Fri, Oct 13, 2017 at 9:23 AM, khandelwalanuj < anuj.cool.khandel...@gmail.com> wrote: > Can someone check this please. > > I just wanted to know which library from "org." is being used here for MAP > messages as mentioned above. > > > > -- > Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User- > f2341805.html >