org.apache.log4j

Class FilteredObjectInputStream

java.lang.Object

java.io.InputStream

java.io.ObjectInputStream

org.apache.log4j.FilteredObjectInputStream

All Implemented Interfaces:

java.io.Closeable, java.io.DataInput, java.io.ObjectInput, java.io.ObjectStreamConstants, java.lang.AutoCloseable

public class FilteredObjectInputStream
extends java.io.ObjectInputStream

Extended ObjectInputStream that only allows certain classes to be deserialized. Backported from 2.8.2

Nested Class Summary

Nested classes/interfaces inherited from class java.io.ObjectInputStream

java.io.ObjectInputStream.GetField

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.Collection	allowedClasses
private static java.util.List	REQUIRED_JAVA_CLASSES

Fields inherited from interface java.io.ObjectStreamConstants

baseWireHandle, PROTOCOL_VERSION_1, PROTOCOL_VERSION_2, SC_BLOCK_DATA, SC_ENUM, SC_EXTERNALIZABLE, SC_SERIALIZABLE, SC_WRITE_METHOD, STREAM_MAGIC, STREAM_VERSION, SUBCLASS_IMPLEMENTATION_PERMISSION, SUBSTITUTION_PERMISSION, TC_ARRAY, TC_BASE, TC_BLOCKDATA, TC_BLOCKDATALONG, TC_CLASS, TC_CLASSDESC, TC_ENDBLOCKDATA, TC_ENUM, TC_EXCEPTION, TC_LONGSTRING, TC_MAX, TC_NULL, TC_OBJECT, TC_PROXYCLASSDESC, TC_REFERENCE, TC_RESET, TC_STRING

Constructor Summary

Constructors

Constructor and Description
FilteredObjectInputStream(java.io.InputStream in, java.util.Collection allowedClasses)

Method Summary

Modifier and Type	Method and Description
private static boolean	isAllowedByDefault(java.lang.String name)
protected java.lang.Class	resolveClass(java.io.ObjectStreamClass desc)

Methods inherited from class java.io.ObjectInputStream

available, close, defaultReadObject, enableResolveObject, read, read, readBoolean, readByte, readChar, readClassDescriptor, readDouble, readFields, readFloat, readFully, readFully, readInt, readLine, readLong, readObject, readObjectOverride, readShort, readStreamHeader, readUnshared, readUnsignedByte, readUnsignedShort, readUTF, registerValidation, resolveObject, resolveProxyClass, skipBytes

Methods inherited from class java.io.InputStream

mark, markSupported, read, reset, skip

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.io.ObjectInput

read, skip

Field Detail

REQUIRED_JAVA_CLASSES

private static final java.util.List REQUIRED_JAVA_CLASSES

allowedClasses

private final java.util.Collection allowedClasses

Constructor Detail

FilteredObjectInputStream

public FilteredObjectInputStream(java.io.InputStream in,
                                 java.util.Collection allowedClasses)
                          throws java.io.IOException

Throws:

java.io.IOException

Method Detail

resolveClass

protected java.lang.Class resolveClass(java.io.ObjectStreamClass desc)
                                throws java.io.IOException,
                                       java.lang.ClassNotFoundException

Overrides:

resolveClass in class java.io.ObjectInputStream

Throws:

java.io.IOException

java.lang.ClassNotFoundException

isAllowedByDefault

private static boolean isAllowedByDefault(java.lang.String name)